ccf7d22a621448acf3ca0d1a40c41feaea7653ed24b26d341db698ea34d39ba1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccf7d22a621448acf3ca0d1a40c41feaea7653ed24b26d341db698ea34d39ba1
Size

252KB
MD5

115b9048ab513c96fed5fcfe05d2e7cc
SHA1

c3c8cedb4a239b5cdfc4b47063fe788ff5510a96
SHA256

ccf7d22a621448acf3ca0d1a40c41feaea7653ed24b26d341db698ea34d39ba1
SHA512

5e9982ca42e4980d6e794378d38b9c5fe93d65467a5af0537fec69131d0ebd564b8e9ce218b54c4b2a280d52a6fc8ae4ff93496472d68906fc5c069f35080c88
SSDEEP

3072:+QEECiTVGee/qTVhecXNa/ZmZttcHyZtw:pTVHIqgsZttcSZt

Score

N/A

Malware Config

Signatures

Files

ccf7d22a621448acf3ca0d1a40c41feaea7653ed24b26d341db698ea34d39ba1
.exe windows x86

dd7226f5563def7607843266ed20c927

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

MethCallEngine
ord516
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord537
ord644
ord572
ord100
ord617
ord619
ord581

Sections

.text
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE