965e90243a68479bfdb9a94f6251642a9eabb0737b1b2f7daf31a487551011e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

965e90243a68479bfdb9a94f6251642a9eabb0737b1b2f7daf31a487551011e2
Size

136KB
MD5

e21bcb298f7bf023e12c62d4b3ba06e8
SHA1

c3d4326f961621f83ded5f79192d4f5d468f870d
SHA256

965e90243a68479bfdb9a94f6251642a9eabb0737b1b2f7daf31a487551011e2
SHA512

e2435ba148306357157cf32d60d3b0b571b4d49543dae12884966528fd55e01d0631291314c38975f241d032d7916080e758b7f6875d92eb2dd527a7df65d38d
SSDEEP

3072:qu5PDykjCBx2hypK7D6zdX3+P+kdMTRTj:o

Score

N/A

Malware Config

Signatures

Files

965e90243a68479bfdb9a94f6251642a9eabb0737b1b2f7daf31a487551011e2
.exe windows x86

b6bc41d87f40fb3a336955c7892636dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100

Sections

.text
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ