b099fd4f139e7a421fc081eab63f85cac335232d4665e84c71fd4702fac9be89 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b099fd4f139e7a421fc081eab63f85cac335232d4665e84c71fd4702fac9be89
Size

128KB
MD5

9c7e66ce2e3e88815be34fae21651921
SHA1

b42b64b976cbbb0d99f5d2ff196010acc3beeccc
SHA256

b099fd4f139e7a421fc081eab63f85cac335232d4665e84c71fd4702fac9be89
SHA512

ff574fcbb5bc6ac1bc0dcea9b4a273c1524a9caee44b6116d9d6def4845a9c4c2e91c744d1ceb2d90db3b79088daa60100c92a9fff255dd75c88e8d7505a7e5d
SSDEEP

768:SDbM0G1aIeMT2eaxg83PuUeqTaeBBW+9BkhtLxzjroQTo2jzr/fDHLVQIAxQQ:SnMDaacg8GtyTlML1VfjLHlAT

Score

N/A

Malware Config

Signatures

Files

b099fd4f139e7a421fc081eab63f85cac335232d4665e84c71fd4702fac9be89
.exe windows x86

795509397dc109a7733bf6ddf62b0995

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursorPos

msvbvm60

ord690
ord187
ord588
MethCallEngine
ord516
ord661
ord557
ord593
ord300
ord594
ord595
ord598
ord306
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ord318
ord319
ProcCallEngine
ord644
ord570
ord681
ord685
ord100
ord689
ord320
ord321
ord617

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ