b96741c17409eb7904b4efa57a8a9d120e3d41093fcf598aa6375f9f21b7a242 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b96741c17409eb7904b4efa57a8a9d120e3d41093fcf598aa6375f9f21b7a242
Size

268KB
MD5

30a6b5bb7558b207cae757178bf8d0c7
SHA1

29390c770f7a09505698358dd019cf6ac5abd8a3
SHA256

b96741c17409eb7904b4efa57a8a9d120e3d41093fcf598aa6375f9f21b7a242
SHA512

015acdc57f1396bc2aed6079c142821ca77f6d95a2e0996039b5a7b60dff4db8a370b9f211d3c19e79e576461d684b00f8fff8e4619790ea62cc36ee95a5ba0c
SSDEEP

3072:P2w1ODVkMaoh9G9Cg17btFUFpDuBplAa+0GgPvD1FzfwVYpODFZaFFwE308U:Pt1IOEnDAp2a+ZgPJFzfqGOD7/EEj

Score

N/A

Malware Config

Signatures

Files

b96741c17409eb7904b4efa57a8a9d120e3d41093fcf598aa6375f9f21b7a242
.exe windows x86

291ec2f380ce855d78310f68c2173db6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord585
ord588
ord696
ord697
ord698
MethCallEngine
ord517
ord519
__vbaCopyBytes
ord553
ord660
ord667
ord668
ord706
ord631
ord525
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
ord675
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord530
ord717
ord533
ProcCallEngine
VarPtr
ord539
ord570
ord648
ord575
ord100
ord610
ord613
ord616
ord618
ord619
ord542
ord545
ord548

Sections

.text
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ