b9863ca67e912435756a277d69fb1e729f6dff7eaa3d34a3d307f835b9f8e267 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9863ca67e912435756a277d69fb1e729f6dff7eaa3d34a3d307f835b9f8e267
Size

100KB
MD5

bd9537eddd653b97442d25e401142830
SHA1

475e94e950e32a89669a163e8596469d88fcc238
SHA256

b9863ca67e912435756a277d69fb1e729f6dff7eaa3d34a3d307f835b9f8e267
SHA512

344e1a61ab35bc0561e7830b5c328594edf984aa5cf98a88e4c18fe62eba71d1954dc2c61ccf9cec4f2ecfd86d456c2863751b9b68104cd39e35da715841e48d
SSDEEP

1536:QgS8xWVLebx2PWnlFsIzNErCDOuh0XtA8JV4DJdi+rc2J6s1L:Qh8xWZG2unHzNoCTh0S8Xyrco6eL

Score

N/A

Malware Config

Signatures

Files

b9863ca67e912435756a277d69fb1e729f6dff7eaa3d34a3d307f835b9f8e267
.exe windows x86

1a0a2fa94f6641b75987f50321ddd1c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcA

kernel32

GetProcAddress
FreeResource
LoadResource
SizeofResource
GetModuleHandleA
LoadLibraryA
LockResource
FindResourceA

msvbvm60

ord516
ord626
__vbaCopyBytes
ord666
ord667
ord669
ord593
ord595
ord598
ord631
ord632
ord525
ord526
ord527
ord529
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord535
ord644
ord537
ord645
ord570
ord648
ord100
ord616
ord617
ord580

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ