503ad2a0372131b9089c44544fb6212397e8b633269376258ff8aaca1ef7034f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

503ad2a0372131b9089c44544fb6212397e8b633269376258ff8aaca1ef7034f
Size

96KB
MD5

151958c09eaef43a1ad1452edf299ae0
SHA1

5d7ee8fe92577a0b0911a479a6976a9c68152a11
SHA256

503ad2a0372131b9089c44544fb6212397e8b633269376258ff8aaca1ef7034f
SHA512

87dc67e5f8b067f4cdb62d687bb32ca4ae531ac3fafe4bd8e5ab95f70388da3ae6cca75a3fe419fb04fcce53231b3a014a4f80f801094fc47fdf99e6068cc8af
SSDEEP

1536:jRzVmsxbo5wkd4QSCsv5XV50E9zXmEzZof89ReHJ4cMiVL1HRpe934nEcA7S:pVHxbo5w44QWV5J9zX5zZ6nWy1HY4Ec3

Score

N/A

Malware Config

Signatures

Files

503ad2a0372131b9089c44544fb6212397e8b633269376258ff8aaca1ef7034f
.exe windows x86

231204c30513cdf63e0bfa48674b93a2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

netshell

DllCanUnloadNow

msvbvm60

MethCallEngine
ord669
ord592
ord524
EVENT_SINK_AddRef
ord560
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord652

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 714B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ