cab8ccada572d9509bc1b1dc834af82846802e24deefbcba30c562e5ea2da666 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cab8ccada572d9509bc1b1dc834af82846802e24deefbcba30c562e5ea2da666
Size

644KB
MD5

fe42cd1b5467f9be7f5b13d334a0b0f7
SHA1

b173a013803b99f942810c13d0eef3bbf396047c
SHA256

cab8ccada572d9509bc1b1dc834af82846802e24deefbcba30c562e5ea2da666
SHA512

47f692b367293402ff12850751bf0fa38ddf20cd91b616fb98396b31eb9f81a9855deea19f3679503167a7ef4e151162e8a1226618d69f682a1dff1195e10393
SSDEEP

12288:LXVf5b/WGKFMWxyoJ/MvoDApYHhBK5bTCl6uFWzipLrWjYdRwlv1A70yd96VrJ4:JZWGKWEFMvcAKK5/ClIipmjY7wlvw9ya

Score

N/A

Malware Config

Signatures

Files

cab8ccada572d9509bc1b1dc834af82846802e24deefbcba30c562e5ea2da666
.exe windows x86

56795a3c21ef58188b1a8c6805512499

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcW

kernel32

GetProcAddress
RtlMoveMemory
LoadLibraryA

msvbvm60

ord697
MethCallEngine
ord516
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord537
ord644
ord100

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 628KB - Virtual size: 626KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ