a05a0bf2e48ebd95ca3f948d4733d062a0fe80d7d9ec7966248d05106ff8be36 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a05a0bf2e48ebd95ca3f948d4733d062a0fe80d7d9ec7966248d05106ff8be36
Size

88KB
MD5

2ba41e9f4d96cfa9643097cf9ad3b870
SHA1

37fc6699e66729009b8bc392bf6048bfc7951910
SHA256

a05a0bf2e48ebd95ca3f948d4733d062a0fe80d7d9ec7966248d05106ff8be36
SHA512

804617241599c25d24480c7c7a41f13ea6d81425b607f65bd5e6e81588318d6d780b5d85111f80fa54d643287fbf193c1d5a0a3e772ab6035ab9387b2fe16449
SSDEEP

1536:7K32StbIR10R8wQYpjaUvq21Vmfx4Osl0pz+X8XwYUB24FWh:KGKmwQEgnpyX8XwY5h

Score

N/A

Malware Config

Signatures

Files

a05a0bf2e48ebd95ca3f948d4733d062a0fe80d7d9ec7966248d05106ff8be36
.exe windows x86

c35936ca6bd0668f80dcf82adb6658d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetThreadDesktop

winmm

midiStreamRestart

msvbvm60

ord183
ord553
ord668
ord669
ord633
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord543

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ