c5a4b50c3e577401f53fc79259214dba75642785f8749dd608b3012964212472 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5a4b50c3e577401f53fc79259214dba75642785f8749dd608b3012964212472
Size

89KB
MD5

1fdc04093b078bd9aa2f2c3d88865fe0
SHA1

5fa3c248b6b7cdf03dcbfe32b6122021a92079e3
SHA256

c5a4b50c3e577401f53fc79259214dba75642785f8749dd608b3012964212472
SHA512

87885868a633ac4523fa5b878650442d07f8161dfd988e80a98ee48b86006159cf4140602dabe7adec9d6fec9db0afa25855471ef2247350f06b9871baabb57b
SSDEEP

1536:zufbLvQ7AwePWjyqQZtpru/QQG0zmekLZq5+bb6jzdXdmzJnZVZBUo0fJNzummw:zr14bZtpqQQGqmekLZqgbS5gb/BUFDia

Score

N/A

Malware Config

Signatures

Files

c5a4b50c3e577401f53fc79259214dba75642785f8749dd608b3012964212472
.exe windows x86

d08c7e847e66be5a184b35fd8c6ba104

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord441
EVENT_SINK_AddRef
ord670
ord671
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord575
ord100
ord615

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ