f9c923d33a672ff380f69c005b7d9ee175ddc696a01c6cdd9cee321387a9aa61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9c923d33a672ff380f69c005b7d9ee175ddc696a01c6cdd9cee321387a9aa61
Size

36KB
MD5

3cb002de0e5424dc922a9cc0b6648990
SHA1

77324cea9fa9d2a9f6b27971e0af260f8d780e9f
SHA256

f9c923d33a672ff380f69c005b7d9ee175ddc696a01c6cdd9cee321387a9aa61
SHA512

a7632ae94ffa7e5b8b130aeb7698c365b86f9cfce6f21e68a31279b87faa7b2b3ca80d7003f83123a5c13db2ddd40cb164bc7dfd873bdfc2a1b07c6105679868
SSDEEP

384:oya1amrjUmiqsFu51oMM/cGmOah2f8IzK9mFdW9+4L7WWW0cJErCq1kiPxIX:3aiubArmZh2fxK9kw+lJYCyZI

Score

N/A

Malware Config

Signatures

Files

f9c923d33a672ff380f69c005b7d9ee175ddc696a01c6cdd9cee321387a9aa61
.exe windows x86

01d2bd638f0a976b01a69b7fb5b85b2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAllAccessesGranted

kernel32

MulDiv

msvbvm60

ord183
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord717
ProcCallEngine
ord644
ord570
ord649
ord100
ord432

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ