e52cb9fafe3fb2536cedd65d354dd8551c1fd5791d833e7cf64ccc153ec60db7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e52cb9fafe3fb2536cedd65d354dd8551c1fd5791d833e7cf64ccc153ec60db7
Size

84KB
MD5

8801e38d7f5a6de71863dcce05b4ca70
SHA1

af9787c3045ade45ea88fd442589fd2220a386b0
SHA256

e52cb9fafe3fb2536cedd65d354dd8551c1fd5791d833e7cf64ccc153ec60db7
SHA512

97d8a792a11b5ec002910f4bfc3bc90e5f58f7099b7c6c208471d8db4e47f3dc7fa630b836adc86adcd2bee21efe4ee66ab884dfc34dcc056986e411ceefbe86
SSDEEP

1536:OHgaDi04m1SkFnoe3/dsSosvvnGi5jkldILJE/V/0OYl/FpzhOmQjqNm:7+44SkFBusGix4Im/10OYVFplBNm

Score

N/A

Malware Config

Signatures

Files

e52cb9fafe3fb2536cedd65d354dd8551c1fd5791d833e7cf64ccc153ec60db7
.exe windows x86

cfc9a6a603bcb554d64132763fd7b3db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

netshell

DllCanUnloadNow

msvbvm60

ord584
MethCallEngine
ord669
ord704
EVENT_SINK_AddRef
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord613
ord432
ord542

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ