c1c18640a1b081566a49bd18cf241ba80f84ed671bb430e8c6bde81f5d913865 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1c18640a1b081566a49bd18cf241ba80f84ed671bb430e8c6bde81f5d913865
Size

48KB
MD5

d9012b395a5d869f0e743ccacb0d7a94
SHA1

2494e8734ae585130d4192264ead37ae67a69ec9
SHA256

c1c18640a1b081566a49bd18cf241ba80f84ed671bb430e8c6bde81f5d913865
SHA512

b03f4f11c158d3351af2f9a5b0104d1234de999ea2af6917cbeb405b86384b7e04a3a846dbb31a1fea31242ce477d29b33550ef5b22f6cf79f9ae97801d17b4d
SSDEEP

768:DFx7jsflpg+pMQ5CQ5UrnhA1X87jprjkqDCyB:DFx7jIlj4A1X83pvk6Ck

Score

N/A

Malware Config

Signatures

Files

c1c18640a1b081566a49bd18cf241ba80f84ed671bb430e8c6bde81f5d913865
.exe windows x86

d113216e1f470384084bfd133707cd8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord187
MethCallEngine
ord519
ord552
ord702
ord598
ord520
ord307
ord709
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord672
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord717
ProcCallEngine
ord644
ord572
ord100
ord616
ord617
ord619

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ