f4fb4a7803ef689875ae6137f1366784aa56d83846437403a4240edca0067abe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4fb4a7803ef689875ae6137f1366784aa56d83846437403a4240edca0067abe
Size

212KB
MD5

608479c16d2f8cfb6e248da4da47e4e9
SHA1

d8fade6667d7cd05794832be7258a4386f5d4300
SHA256

f4fb4a7803ef689875ae6137f1366784aa56d83846437403a4240edca0067abe
SHA512

5208120759a03d979947f382daef46a08af3efc41cf961c13d0df72abf2f766851dca44600772bfbbdb5b681a86618037add74a93f180e4f228047fc59f2b17b
SSDEEP

384:IFP30+wYcJ3lq+vvDlUhOq59rSVO8P0dkUT0eEdw:IFP3vwNL5Qn0W

Score

N/A

Malware Config

Signatures

Files

f4fb4a7803ef689875ae6137f1366784aa56d83846437403a4240edca0067abe
.exe windows x86

931df82713a57d0b6428dfe64aa7a43b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord537
ord644
ord578
ord100
ord431
ord617

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ