bdd89dbf3506b24bf0087f0b4fcdfa042acbbd92d4c50e1cfa67835fd34893bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdd89dbf3506b24bf0087f0b4fcdfa042acbbd92d4c50e1cfa67835fd34893bb
Size

200KB
MD5

dac5b347f9b1b26e977cc2bc396fa6c8
SHA1

36b15ab33d2ea37761d815946f6c6824191e76a7
SHA256

bdd89dbf3506b24bf0087f0b4fcdfa042acbbd92d4c50e1cfa67835fd34893bb
SHA512

28b31543a4da638f272fe018d5a4d4edd00efad76ba77805b7787e6deb842a04005930b6147826515a341ade0ff1648c176f9f8880d354b5dc62ed8984dd0d5a
SSDEEP

3072:bGNFtPwgwfL4CCwPSO1Cq2D2YtkDugUkN/sf+x3GkS8:bYptwfL4C67DLEugfN/s9kS

Score

N/A

Malware Config

Signatures

Files

bdd89dbf3506b24bf0087f0b4fcdfa042acbbd92d4c50e1cfa67835fd34893bb
.exe windows x86

cad9d7a1e55dc4edd87135d205fee319

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

MethCallEngine
ord516
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ProcCallEngine
ord537
ord644
ord100
ord616
ord581

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE