f1bbd530c3b20f0e1b008828af0e08a4198f6b4314afa996370b09c3531888c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1bbd530c3b20f0e1b008828af0e08a4198f6b4314afa996370b09c3531888c4
Size

146KB
MD5

1a8749805f7fe1b350afd11551835e00
SHA1

16011da18da3b5732d67752837098e981905b208
SHA256

f1bbd530c3b20f0e1b008828af0e08a4198f6b4314afa996370b09c3531888c4
SHA512

9e2a8beaa752ef64626303ae781d0d29c601a87887475da83bfb30c6424421f0c11f7f821e5a3d9350d54cade41b1694fd255e67f86b5828ae107a97d4dd8f82
SSDEEP

3072:jJ4QJwrwookZHgr5RQnU0KxZ3i4abddSskUl4h:rwrwsBgr5sFKjMO

Score

N/A

Malware Config

Signatures

Files

f1bbd530c3b20f0e1b008828af0e08a4198f6b4314afa996370b09c3531888c4
.exe windows x86

bcce80e41cf0e5f3d68f96d6e41b8475

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord663
ord591
ord598
EVENT_SINK_AddRef
ord528
ord670
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ