f9c5d62ea8c7b4b95a5495ecf7799c4cc82712986b95dece9a5bcc0244a1f671 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9c5d62ea8c7b4b95a5495ecf7799c4cc82712986b95dece9a5bcc0244a1f671
Size

88KB
MD5

042830fcf4cb5dab6f965e2dfb609360
SHA1

cd087e5dfb84e95e2813d70d42bc4d62c156b3ca
SHA256

f9c5d62ea8c7b4b95a5495ecf7799c4cc82712986b95dece9a5bcc0244a1f671
SHA512

9d2e2fc9e301adb7910ce998b5cbc9caaa2c28b7482f9adf0191b9804ac0ae38f20fa2a37fc868aa16e17f8fe5a7d2d01a5f9a370856a4a1f6f21732ef45717e
SSDEEP

1536:fQZgaD574m3LAZt69WKpo+YAiUVlAXIpZS3/54cYOjDTEx6zhOm8COu+:YyK4Eid+3iUVlPPSPZ2x6l0u+

Score

N/A

Malware Config

Signatures

Files

f9c5d62ea8c7b4b95a5495ecf7799c4cc82712986b95dece9a5bcc0244a1f671
.exe windows x86

cfc9a6a603bcb554d64132763fd7b3db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

netshell

DllCanUnloadNow

msvbvm60

ord584
MethCallEngine
ord669
ord704
EVENT_SINK_AddRef
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord613
ord432
ord542

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ