41b64d2b88605bfb3c7671a10b5ffc2b1aa76e83ade56c5b31dda6a77b6fe493 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41b64d2b88605bfb3c7671a10b5ffc2b1aa76e83ade56c5b31dda6a77b6fe493
Size

548KB
MD5

f61e5ce3196f3f2f254de80fd1011991
SHA1

fca5443ce9f67d5a214772e236084143ecb6a2cd
SHA256

41b64d2b88605bfb3c7671a10b5ffc2b1aa76e83ade56c5b31dda6a77b6fe493
SHA512

ecfb1986abeff97c0fc48fae103db5405523f0bffacfe3adbefaca2632b921004522c17bd912484fcca9e112c0cc958d2f55044d12fddba1263b1aec104655b2
SSDEEP

6144:04GGN3OlOZDZ5sA5u3OlOZDYHX970xXH:0M3OlO9ZWAM3OlO9YmXH

Score

N/A

Malware Config

Signatures

Files

41b64d2b88605bfb3c7671a10b5ffc2b1aa76e83ade56c5b31dda6a77b6fe493
.exe windows x86

38303ebeba79cf3d90b99314c34188b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord648
ord100

Sections

.text
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE