f84ca61952a90225a845cbf4636f215486498e238c10414705d60fa4e3fc5b16 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f84ca61952a90225a845cbf4636f215486498e238c10414705d60fa4e3fc5b16
Size

119KB
MD5

1a3bac3c920dc9a6ec1aa4dae6ebf720
SHA1

2b77b26354db3ed997ebd1608bcc00211b91b8d0
SHA256

f84ca61952a90225a845cbf4636f215486498e238c10414705d60fa4e3fc5b16
SHA512

2d537367fd29afb0577e91e99ff6ad14ce2cc56e509208cd52f14c255510ddf1cfb79cc11fdea70a9b85877a99401603e9bd0083c85f00584a271cc7420a1ec1
SSDEEP

1536:HHZA+jhm6lg2c5sbMj+hyXKkaXop1e1b:mKPJc5sbnEKopA

Score

N/A

Malware Config

Signatures

Files

f84ca61952a90225a845cbf4636f215486498e238c10414705d60fa4e3fc5b16
.exe windows x86

bcee5e5eae7145500b80ca2c08a02fc7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord441
ord669
EVENT_SINK_AddRef
ord562
ord677
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ