e6ca59ce2bb213f99f38a4f047af08beccca509caa8002c870966b8d20350f44 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6ca59ce2bb213f99f38a4f047af08beccca509caa8002c870966b8d20350f44
Size

208KB
MD5

8976835cac41d4ababc265472d0106ca
SHA1

bc0c25f01d2b12cb216f959d7f37715de9903d40
SHA256

e6ca59ce2bb213f99f38a4f047af08beccca509caa8002c870966b8d20350f44
SHA512

97af30b12fff900b13499a1f3ec3feeb83a289c709401a8232c4424e2feda1e48f89ee0adfc75570b23f3848fb2af4c52528f6d44ef4f81620cf3685173498b0
SSDEEP

6144:lA0ascOxaG7UWXHGJ3Irv6pJVArkeu6QYJ:l73XmVID6P61

Score

N/A

Malware Config

Signatures

Files

e6ca59ce2bb213f99f38a4f047af08beccca509caa8002c870966b8d20350f44
.exe windows x86

342f55d752cccfd4ecf1a44c7b90889b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord537
ord570
ord573
ord100
ord619
ord581

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.d(=/G$H
Size: 172KB - Virtual size: 4KB