cdf8e6df7152acbdb254e15bbe2695f209a7bd10d85b92063ec5d626a7d447b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdf8e6df7152acbdb254e15bbe2695f209a7bd10d85b92063ec5d626a7d447b2
Size

104KB
MD5

ea9b14cc0d3fdf9da1ecac187761abec
SHA1

5ed638f44dbce6e5be659e5881a721e837eb3859
SHA256

cdf8e6df7152acbdb254e15bbe2695f209a7bd10d85b92063ec5d626a7d447b2
SHA512

11528fd19a95210078827edfaee4d1be5b6cfdb22839343162e4c0862255ed0ed55086c3cef66ddce143c79da1cc493304cb803dbc7c5f69956b204faf86ed6f
SSDEEP

1536:Fiw/ps3sQm8rwpuVN3Iaz/QfT26fsCdrUf9xbQsq78ACTN:Y2v8rwpEQfbdeQt7jIN

Score

N/A

Malware Config

Signatures

Files

cdf8e6df7152acbdb254e15bbe2695f209a7bd10d85b92063ec5d626a7d447b2
.exe windows x86

c628db17f84b540a56a694e4b9901e22

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcA

kernel32

GetProcAddress
LoadLibraryA

msvbvm60

__vbaCopyBytes
ord669
ord593
ord595
ord598
ord632
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord535
ord644
ord645
ord648
ord681
ord100
ord617

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ