d4c967e897eb49850c481e1283841853d5916afdb1670ce706a7212ff5c7da04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4c967e897eb49850c481e1283841853d5916afdb1670ce706a7212ff5c7da04
Size

84KB
MD5

dd8a168a3ed748cf0949f85c4d4072da
SHA1

642d0848d1977c5273c20e56e6d7bb3a3598884d
SHA256

d4c967e897eb49850c481e1283841853d5916afdb1670ce706a7212ff5c7da04
SHA512

e9614e525061a61730f7d45d532fd460c70f17e8a297fe97be5c86798b7510ec5f863a4c9c93bcddbd14ebacf139954b8fc1c02b52b0c4da62a7a50135fdbf2e
SSDEEP

1536:ZtW0ISzcFESCbqfwEfwwp4fMzFHxEx+V5z:ZYWYEbmp4fMzAx+3z

Score

N/A

Malware Config

Signatures

Files

d4c967e897eb49850c481e1283841853d5916afdb1670ce706a7212ff5c7da04
.exe windows x86

23244763488e50c43d456510f9343a34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord697
ord698
ord516
ord517
ord518
ord626
ord598
ord520
ord306
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord318
ord717
ProcCallEngine
ord535
ord644
ord537
ord645
ord570
ord573
ord681
ord578
ord100
ord579
ord616
ord617
ord618
ord619
ord542
ord580

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE