d61318bb0aec717df383f4afc48b7797a92825f827fae4cc3163fc79044b8c8d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d61318bb0aec717df383f4afc48b7797a92825f827fae4cc3163fc79044b8c8d
Size

80KB
MD5

0c4f348214672affad48159bb3f3cee0
SHA1

a713c461abae0d4ef367911159db0ce5b54bb9a5
SHA256

d61318bb0aec717df383f4afc48b7797a92825f827fae4cc3163fc79044b8c8d
SHA512

68fed143385a03ec9872b8d14773a123491a85157791f091d13423843fa2e86a8c59ae1bd0732238a25cd066861a1e4ff610ec1afeb9abda4112d973e0e4d683
SSDEEP

1536:JX2e6UfxH/8rbin3ZlUOC2FFQHL8bY256o0hdGrQ1SGEhYvLsxLo:QtI/8rb63AB2FWHL8UI6LhSGEh4LsxL

Score

N/A

Malware Config

Signatures

Files

d61318bb0aec717df383f4afc48b7797a92825f827fae4cc3163fc79044b8c8d
.exe windows x86

56fb9247bb526e79b672180cf8273676

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAllAccessesGranted

msvbvm60

ord183
ord698
ord662
ord669
ord592
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord544

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ