de8f78f3e25812949ef0fb6a1bc9f1d6101b9513285702c4e54ef29fa66ec259 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de8f78f3e25812949ef0fb6a1bc9f1d6101b9513285702c4e54ef29fa66ec259
Size

644KB
MD5

0babfa19558c3be9202fcfa04e423400
SHA1

44bcf055398935980972626ddcd58f9efd75597c
SHA256

de8f78f3e25812949ef0fb6a1bc9f1d6101b9513285702c4e54ef29fa66ec259
SHA512

124664b24b0a4344b6a6a38006cc87fde99d52bc87bec7a56559a495f4550fa489f6dc44440f5bc9379deb10610400b0da9de278740fd7091feec5cfde668f1f
SSDEEP

6144:f08wjRP8s++xBKBZTlshqmNbxsYx/SXkVhCAfaOL5DxwzcB9olGDQMPDUeuLZKf+:m5+kMMbc0Xa3QsGUMUJSH63swRG

Score

N/A

Malware Config

Signatures

Files

de8f78f3e25812949ef0fb6a1bc9f1d6101b9513285702c4e54ef29fa66ec259
.exe windows x86

96c41bda31b47bb1a43ae94613ec2edb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord586
MethCallEngine
ord518
ord519
ord553
ord660
ord593
ord598
ord632
ord525
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord644
ord570
ord648
ord578
ord100
ord610
ord616
ord617
ord619
ord542
ord545
ord548
ord581

Sections

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 580KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE