ef05561a32d9a18c7af3dc407bcd59758088c40d3e23f7ef195c9cf8e59ad22f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef05561a32d9a18c7af3dc407bcd59758088c40d3e23f7ef195c9cf8e59ad22f
Size

96KB
MD5

7320c2479c9408f3c2534f4e57479f6d
SHA1

d4599b8dfee73be335e0c53916ebda7d4f7cdc2d
SHA256

ef05561a32d9a18c7af3dc407bcd59758088c40d3e23f7ef195c9cf8e59ad22f
SHA512

62d9e1087203435d87b2e2e8935170bc3cff1896b34d8fc3bb0ca7ca5856c225f4e71d6bae2465308353bf225db331c9250cb0bb00ee560cf7621c8ce13f9a71
SSDEEP

1536:Nkp3sg6K8G7BlQywaauWsWwOG5u/MezLND39:Q3sg6K8GoyAwd5u/Nz

Score

N/A

Malware Config

Signatures

Files

ef05561a32d9a18c7af3dc407bcd59758088c40d3e23f7ef195c9cf8e59ad22f
.exe windows x86

82e3cb84a9bd45ec57373531f3cced7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

SetServiceStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW

kernel32

WaitForSingleObject
CreateEventW
SetEvent
CloseHandle

msvbvm60

EVENT_SINK_GetIDsOfNames
ord693
ord694
ord698
MethCallEngine
EVENT_SINK_Invoke
ord516
Zombie_GetTypeInfo
ord592
ord593
ord594
ord595
ord598
ord520
ord631
ord632
ord525
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord606
ord714
ord608
ord717
ord319
ProcCallEngine
ord537
ord644
ord570
ord573
ord681
ord685
ord100
ord320
ord321
ord616
ord617
ord618
ord650
ord546
ord580
ord581

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ