b3faafc1611c6a195fe6402cded1a6c7244e81a9e4390a16c70c078a646c8c9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3faafc1611c6a195fe6402cded1a6c7244e81a9e4390a16c70c078a646c8c9b
Size

1.7MB
MD5

6cc68e9742594b6a57da93187562e64f
SHA1

c6100549e0b8323889b093ed3b8047989b591398
SHA256

b3faafc1611c6a195fe6402cded1a6c7244e81a9e4390a16c70c078a646c8c9b
SHA512

a27d34489e459878ae5b7168c589cd107fcbf7cae04c00f1c97fb9ec7d540c8139e8c95709d56c1e48c51fcf236f2dcca39dd9b42ff1b9f112320d0eefec863d
SSDEEP

24576:2RphwcKQ68W5AAym+u8FfgzcrRphF68WdAA8t+DcKD8DfgzcJRphRAAxp+x68Wx+:4nKQ68YA/gO968YAjKsggJAJ68ZKngz

Score

N/A

Malware Config

Signatures

Files

b3faafc1611c6a195fe6402cded1a6c7244e81a9e4390a16c70c078a646c8c9b
.exe windows x86

38a08c6eb298b8238ee28086ff7b703e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord620
ord516
ord518
ord519
ord662
ord593
ord300
ord594
ord595
ord596
ord598
ord599
ord306
ord520
ord631
ord525
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ProcCallEngine
ord535
ord644
ord537
ord645
ord570
ord648
ord571
ord572
ord681
ord576
ord685
ord100
ord616
ord618
ord542
ord545
ord546

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ