cf979791e14d063384727c86e2296497cd94549c4f1f8e4311921a7fe9b7d484 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf979791e14d063384727c86e2296497cd94549c4f1f8e4311921a7fe9b7d484
Size

184KB
MD5

71a92d224f50c57aa799b8134b64a33c
SHA1

70ba2af0138302b91cd46afbe97e846c0961c174
SHA256

cf979791e14d063384727c86e2296497cd94549c4f1f8e4311921a7fe9b7d484
SHA512

b1784967bfb5881678f4342bed79e3369db90396f51e6587c1ac6138d9bccfb6b1a35753f5722df33358d7423b860441f36f9e2949f7d1154b4086bf57ae8400
SSDEEP

3072:73tlsrGIWYJ/NWMPSs+t3XcrHTxvL2sJOx:xSru2N165t8vxj2mO

Score

N/A

Malware Config

Signatures

Files

cf979791e14d063384727c86e2296497cd94549c4f1f8e4311921a7fe9b7d484
.exe windows x86

ea69993f4d6cff08e500e1cb9d5b1916

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord593
ord595
ord522
ord631
ord632
ord526
ord561
DllFunctionCall
ord563
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord648
ord681
ord100
ord617
ord619

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE