9ff192fce260bd0451e3382bfa51d3821f3c9aecf3943c8036c1cfdcbfb3616d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ff192fce260bd0451e3382bfa51d3821f3c9aecf3943c8036c1cfdcbfb3616d
Size

99KB
MD5

f78ce028b533a3381242712a4e28a7f6
SHA1

567d7072005decde4fa35bbdbd94c8a56760b998
SHA256

9ff192fce260bd0451e3382bfa51d3821f3c9aecf3943c8036c1cfdcbfb3616d
SHA512

4acbe9fe8b511c1c31e850e17324155f5bcdb29d0510df773f85efd592ca1588d5a072856921b97418882c80df59cfabf56767a5ccea45abfd552738935a25ca
SSDEEP

3072:6IkyezGejVn3ZeajKhyBpkxjjZhF1QbAJLtEPEYK:6VbeLtEPED

Score

N/A

Malware Config

Signatures

Files

9ff192fce260bd0451e3382bfa51d3821f3c9aecf3943c8036c1cfdcbfb3616d
.exe windows x86

907ca4624dd41bf45ff96afb8822675d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory
CopyFileA

oleaut32

SysAllocStringLen

msvbvm60

MethCallEngine
ord516
__vbaCopyBytes
ord669
ord595
ord598
ord631
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord573
ord681
ord578
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 308KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ