c1ea52dee071a0c8b7cfc76ed0bbf6ea5a363e23c75480be7d527cdac563cf29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1ea52dee071a0c8b7cfc76ed0bbf6ea5a363e23c75480be7d527cdac563cf29
Size

920KB
MD5

7f474c0c330b6529a6547421caa12d67
SHA1

330558407612fff05392e0dbcb0a3f1047481f11
SHA256

c1ea52dee071a0c8b7cfc76ed0bbf6ea5a363e23c75480be7d527cdac563cf29
SHA512

86b59820153105e8418633a64c8347d059af19123b267c596b44d7ca7e5e5b610720096cc635c6a7bc0d15b734a3123a9e6b836abf26052c33211f7861f3bfca
SSDEEP

24576:LhImslYmr7SPI8ZSH59HyNACCDt0e1pRCX:thGXrvZ9HKA/DtzpRCX

Score

N/A

Malware Config

Signatures

Files

c1ea52dee071a0c8b7cfc76ed0bbf6ea5a363e23c75480be7d527cdac563cf29
.exe windows x86

9c4cd12c89c11b7c623d9dcadfafceb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord537
ord644
ord578
ord100
ord617

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ichd
Size: 880KB - Virtual size: 4KB