a6012babea4c372ba4a730ac62b9b7e07c7e7394dfb84de465beb98c451a1aa7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6012babea4c372ba4a730ac62b9b7e07c7e7394dfb84de465beb98c451a1aa7
Size

268KB
MD5

d56708a6de1823ba55e1850e9fe69922
SHA1

1cd9812db060df1087a15707b4d0f30cafd3ebb9
SHA256

a6012babea4c372ba4a730ac62b9b7e07c7e7394dfb84de465beb98c451a1aa7
SHA512

5a0be3603b03efc9b83bdf7e15753b4c891e6e1b29d4ea5a4c78b9299004437dff6ade131a328751707cb069192e3105f9ab0850374ff384dbd1cd3b3c135c05
SSDEEP

6144:8cUK3qDpvTT6LDuibf+phTjJEUgX/+Fmi3D7B8B9cFNz:8cU7TOLDuibWphfJEVv+Fmi3VFZ

Score

N/A

Malware Config

Signatures

Files

a6012babea4c372ba4a730ac62b9b7e07c7e7394dfb84de465beb98c451a1aa7
.exe windows x86

f2ba1e6021ee51caa7059c5e0d62d110

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

MethCallEngine
ord516
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord644
ord100
ord617

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE