61b8e77fabc76f09ed5d2697331769e2acf9b2312a822064597f124dc97c03b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61b8e77fabc76f09ed5d2697331769e2acf9b2312a822064597f124dc97c03b4
Size

516KB
MD5

eade39afc81618f2d549559cb6fff347
SHA1

a541f20f8eee2c9ad3ebc4fa90ffd53404755b36
SHA256

61b8e77fabc76f09ed5d2697331769e2acf9b2312a822064597f124dc97c03b4
SHA512

3b673e81cfe16625d9408be46e809cdf7413a6356657bb9a3d1ad76cb0759d0bc96b10ef8ea27ae8e1ab6481b346e7c804347f8dc1890e4be494b9f338401ef2
SSDEEP

12288:vlfKnyq1tPeW9oZA9mpmV39MOFF2ek2cxEXto1NhCG:l8ptT4qVtcek2aUC/hC

Score

N/A

Malware Config

Signatures

Files

61b8e77fabc76f09ed5d2697331769e2acf9b2312a822064597f124dc97c03b4
.exe windows x86

87e1eff45d4b9d65f275a3b510f16b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord598
ord520
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord647
ord685
ord100
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 484KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ