c896579ceed46ff8658539d1ffca65573a2a2dbe7354cb371046685fa9455221 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c896579ceed46ff8658539d1ffca65573a2a2dbe7354cb371046685fa9455221
Size

173KB
MD5

23c9fef114b44850688088977d3b1964
SHA1

0e9666a7bb024c5350c274dac523fdc3ebc97685
SHA256

c896579ceed46ff8658539d1ffca65573a2a2dbe7354cb371046685fa9455221
SHA512

355b499f4bc8206f89f6703ac127abde74ae781617bfc2ab6a407f9dbc3878679d3b9a9a23643db692a8fb91eea4b8e117bdb1458a3d99b04e248d0e4f31e403
SSDEEP

3072:jHOYlL4h4ynO5aH9ixTzFBHJd8HZ7sPfswQQwGuBd2v3fArF+oXZY:juYc4yO5aH9i5JxJd85wPf7i29J

Score

N/A

Malware Config

Signatures

Files

c896579ceed46ff8658539d1ffca65573a2a2dbe7354cb371046685fa9455221
.exe windows x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Sections

.text
Size: 165KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE