e540a69a549506362c02dde0e6c0be684b87a1513020ce7f759b5893f0a9d290 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e540a69a549506362c02dde0e6c0be684b87a1513020ce7f759b5893f0a9d290
Size

168KB
MD5

1ebabf7894973a35f0020490b0ea8f00
SHA1

78fb2ca21125b0eacd76631250ecc03973f4a02e
SHA256

e540a69a549506362c02dde0e6c0be684b87a1513020ce7f759b5893f0a9d290
SHA512

d381f675637c5aff9c3df7ea0d8a6196466c5366ff7498450b8c68978092ad3f5e9b74b1e5e96fceeec23a1b6bb9c5ae53c367777e62112bb3e17902fd5c9704
SSDEEP

768:8fWTkFFHggtmazmkAEBSLvL5nC6m6apiVypBGnSzF4/yW7bN8q43yywD+C4pOrVy:8IkFJggbSES/yXzeyW/njtD0pOrVy

Score

N/A

Malware Config

Signatures

Files

e540a69a549506362c02dde0e6c0be684b87a1513020ce7f759b5893f0a9d290
.exe windows x86

3697944a64a62226d23da3306d9467c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

thumbs .db

MethCallEngine
ord516
ord666
ord595
ord598
ord520
ord631
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord645
ord576
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

. data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE