6f312f36818029f9ca8d0d2bd25457e76dfd619ece39f574b0d4086dc3ecb1c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f312f36818029f9ca8d0d2bd25457e76dfd619ece39f574b0d4086dc3ecb1c1
Size

32KB
MD5

29718f3cd78cf9ea80f0622e4b186590
SHA1

a15cafb496a247031c25a417ff051c0aea79c3d3
SHA256

6f312f36818029f9ca8d0d2bd25457e76dfd619ece39f574b0d4086dc3ecb1c1
SHA512

295c726aa134224e1daa7ae8b62386cc04479d2718a935f9168f1c1ae3db8e15b683dc9ad7feea32eaba5be9fcd79279bee77626f762b72fce388dc2152b5e77
SSDEEP

768:ucyagYHNZbyLuCA4t2HG1F5+jnpxlIy2AwT:u/agY7yU4t2HGQq

Score

N/A

Malware Config

Signatures

Files

6f312f36818029f9ca8d0d2bd25457e76dfd619ece39f574b0d4086dc3ecb1c1
.exe windows x86

571f81717b84631965794248e8927377

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHBrowseForFolder

msvbvm60

MethCallEngine
ord515
ord669
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord539
ord570
ord100
ord432

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ