c18940479a64c94ff68f0eaeea9d1d5a91a8493dd45ea77c3747e2b5b2f895f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c18940479a64c94ff68f0eaeea9d1d5a91a8493dd45ea77c3747e2b5b2f895f6
Size

116KB
MD5

921b6a8d08a0520487616d9232777ed1
SHA1

ad3ff0c828c7a63128452d499b45a73dc4a9cdce
SHA256

c18940479a64c94ff68f0eaeea9d1d5a91a8493dd45ea77c3747e2b5b2f895f6
SHA512

5bc9a89f0c4a7cedfd30d5ddf697ee5a2ba9a13d447ccdd56282243a0d755df44b40357fff047e80b00a455567f158b04de41e3272baa6572b8770884dfe7889
SSDEEP

3072:X3tlsrGIWYJ/NWMPSs+t3h2crHTxvL2sJOx:NSru2N165tfvxj2mO

Score

N/A

Malware Config

Signatures

Files

c18940479a64c94ff68f0eaeea9d1d5a91a8493dd45ea77c3747e2b5b2f895f6
.exe windows x86

ea69993f4d6cff08e500e1cb9d5b1916

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord593
ord595
ord522
ord631
ord632
ord526
ord561
DllFunctionCall
ord563
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord648
ord681
ord100
ord617
ord619

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ