b5a4e696192f9e82dfa8ce25bc188d1a6675d13e6f8197e974b85ed9c550e62c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5a4e696192f9e82dfa8ce25bc188d1a6675d13e6f8197e974b85ed9c550e62c
Size

256KB
MD5

adf2f7f3e5c4678471f88366f05854d6
SHA1

45f0a77d4b37a41d12eed4bff328f763eea6f420
SHA256

b5a4e696192f9e82dfa8ce25bc188d1a6675d13e6f8197e974b85ed9c550e62c
SHA512

27bb749eef900182c8364565f164469b23a0fb5515ff55164b127a1d331981a8e00bd60a0c9d2bc7b6b664c0c953d2a92bcfefd26ab0202010db8f2984b478dc
SSDEEP

3072:ZDtn5ymi8Eu11uZaLJbN2SQ3N7Do0JgT5SVtoaKGlD8yWC242UcdRCU4J4lg4E4N:Z

Score

N/A

Malware Config

Signatures

Files

b5a4e696192f9e82dfa8ce25bc188d1a6675d13e6f8197e974b85ed9c550e62c
.exe windows x86

023cefb15b4c973e5d08f16e38b2bd93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
Zombie_AddRef
ord100

Sections

.text
Size: 248KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ