ad99fddcd6c4b08427d8c1c1d2e18e6aa124c877731e0cb64a2067942c5600e7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad99fddcd6c4b08427d8c1c1d2e18e6aa124c877731e0cb64a2067942c5600e7
Size

160KB
MD5

8cafafbb9049b3be5fede6299760a395
SHA1

7f3d2a63fec261556ad3268b40afd1b5dbe481e4
SHA256

ad99fddcd6c4b08427d8c1c1d2e18e6aa124c877731e0cb64a2067942c5600e7
SHA512

dbc4dd71438694edafad0041d77cd5b3cfac7bacd7656d1f0ea0752172dc8dfdba70d9335ff65c463f5c617890440a35eed50a9cbad80db4b4767310e01beac0
SSDEEP

1536:h/tFXNbjsaAE7sBNqf6TEIuo7mg2vp5Wi0QqrbdWBgQ1gDDDR5odLybll/65itDF:drl/D7sBAON7mguTqrO34fCyNCq

Score

N/A

Malware Config

Signatures

Files

ad99fddcd6c4b08427d8c1c1d2e18e6aa124c877731e0cb64a2067942c5600e7
.exe windows x86

ea659fdd9acea2745b8192aa6d23dbe5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord584
ord516
ord660
ord593
ord594
ord520
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord535
ord644
Zombie_AddRef
ord573
ord681
ord575
ord100
ord546
ord581

Sections

.text
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE