bda81f7f90d0467046adf9d8ea0dccec9cd7d252c93ddf046c187b004743adb6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bda81f7f90d0467046adf9d8ea0dccec9cd7d252c93ddf046c187b004743adb6
Size

175KB
MD5

505c60bcea4428fcde2d791aba9da878
SHA1

3e85ff53427a3299801d11f6e891c546b3a903f4
SHA256

bda81f7f90d0467046adf9d8ea0dccec9cd7d252c93ddf046c187b004743adb6
SHA512

9be58eaf64131cfaf42acd709dfea39311b296d895f8aad1e7bd758d7adce8038aab033a7f853ee9293506dc3d4e9b5bb16ed8d9d90033903f4b57bf393e6435
SSDEEP

3072:aXhnWZhyPOXXT0hTebK7v0+0X0LYsng7SNuz7SyvimTDALVHRQIFT4oiL:a4ZoPOIhacv0++EIbz7DKhZFFT+

Score

N/A

Malware Config

Signatures

Files

bda81f7f90d0467046adf9d8ea0dccec9cd7d252c93ddf046c187b004743adb6
.exe windows x86

d110e0198aaccc67ae7d4d09199173b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcW

kernel32

GetProcAddress
RtlMoveMemory
LoadLibraryA

msvbvm60

MethCallEngine
ord516
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord537
ord644
ord100
ord616

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ