64a1a80fbde49a256e81a02fd6c6c3286c779f2f9def555ac10698d8d84882fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64a1a80fbde49a256e81a02fd6c6c3286c779f2f9def555ac10698d8d84882fd
Size

568KB
MD5

008833f2120ef3fbf73b5cdec04efb40
SHA1

0792add4ad7f12adc320511e2385b698b2b591b6
SHA256

64a1a80fbde49a256e81a02fd6c6c3286c779f2f9def555ac10698d8d84882fd
SHA512

63d1cde25b6df5c6aaff5aa240b4cfe28e4ba8aba3426b0a78312836b458a24e5562db40d5344c4ba967da8346f9a6bac9de6ddd66bb8b083d9fd50d9d4c8c39
SSDEEP

6144:riswSUQUbb4eRpBJ+CGGDKLe8Wiyq+MsbzhyJDwH4sie4zsMgzm4NibqXo:ySUTbnz4kKdsbzMA4s3SsUzbZ

Score

N/A

Malware Config

Signatures

Files

64a1a80fbde49a256e81a02fd6c6c3286c779f2f9def555ac10698d8d84882fd
.exe windows x86

47646cb90691721d948f61525e59843f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord626
ord666
ord667
ord593
ord594
ord595
ord599
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord573
ord681
ord576
ord685
ord100
ord616
ord617
ord650
ord580

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 484KB - Virtual size: 482KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ