ff29bc786033dbef781394cc15ef6c37c0d6d5c0f56cbc9f5e8ba759b5fada4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff29bc786033dbef781394cc15ef6c37c0d6d5c0f56cbc9f5e8ba759b5fada4f
Size

164KB
MD5

13f72e9e811973883b13c4f3adaef284
SHA1

35e24603da289d845f45ba65154bdea15533644e
SHA256

ff29bc786033dbef781394cc15ef6c37c0d6d5c0f56cbc9f5e8ba759b5fada4f
SHA512

1fa4e1fc91504dfad6dd6893f6650d77d18142cc20022f20a510c76c0985bda368a97627ee3f88331e385d8854d67efc0c63369ce563b796494c773dc11b29c6
SSDEEP

3072:QQ0aDyPabhqJlqGY/6by9vw4/iJr62TquMMEBrsjyZ:10ascOM9l522uMfsu

Score

N/A

Malware Config

Signatures

Files

ff29bc786033dbef781394cc15ef6c37c0d6d5c0f56cbc9f5e8ba759b5fada4f
.exe windows x86

342f55d752cccfd4ecf1a44c7b90889b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord537
ord570
ord573
ord100
ord619
ord581

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.d(=/G$H
Size: 128KB - Virtual size: 4KB