c6e8333650ddaa0c0f717e853ec0e783b509e3609016379f63195814be6a7b20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6e8333650ddaa0c0f717e853ec0e783b509e3609016379f63195814be6a7b20
Size

232KB
MD5

495dd65d0264fc8c0f8b224ebdd25276
SHA1

1e46c7d35cc7f3a014995544edd595c663a85a39
SHA256

c6e8333650ddaa0c0f717e853ec0e783b509e3609016379f63195814be6a7b20
SHA512

4c4c7282f7c9b66444f7bf2055b02992c6049b707694d7a24132128b87d55368a3caa0f8bd9118c1d34de38e296a1150b63203df079ab2d96145931d58482de3
SSDEEP

6144:72JR6jBaplmtyCrAotVvp+/cWD0QBZeP2ljm:6Jwd9y4JtVvp+EdOeP

Score

N/A

Malware Config

Signatures

Files

c6e8333650ddaa0c0f717e853ec0e783b509e3609016379f63195814be6a7b20
.exe windows x86

852b6112fe25e123ee41640bc5110ef3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord555
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord685
ord100
ord617

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ