a50c04501259c891f42284abc736e3e20f25f9fa3eee1aaafe96d4ab599d3c41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a50c04501259c891f42284abc736e3e20f25f9fa3eee1aaafe96d4ab599d3c41
Size

263KB
MD5

35113850d5a77fd86a62eda3eb00d1cf
SHA1

79112f30b2e8b6b619aa7e073d8131882a84f220
SHA256

a50c04501259c891f42284abc736e3e20f25f9fa3eee1aaafe96d4ab599d3c41
SHA512

24a5d349d1a52678717676ff0399745ad585e8c8dd3ee371bb82d0c88a1b071c98769372dc14768e0c003027f5b0400aa9fc32fb0ce8b679097941bf800f02b2
SSDEEP

6144:LMjHmNBrLMrM6+lFrextzcGwkSEiPldqtts7VG6L:uHmNNLRP6xtgGwNbqtwG6L

Score

N/A

Malware Config

Signatures

Files

a50c04501259c891f42284abc736e3e20f25f9fa3eee1aaafe96d4ab599d3c41
.exe windows x86

d110e0198aaccc67ae7d4d09199173b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcW

kernel32

GetProcAddress
RtlMoveMemory
LoadLibraryA

msvbvm60

MethCallEngine
ord516
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord537
ord644
ord100
ord616

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ