cab1443c6f3687a751bc3e6a9849fae59e8a60577d03980e6b0d0fe563ccd58e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cab1443c6f3687a751bc3e6a9849fae59e8a60577d03980e6b0d0fe563ccd58e
Size

91KB
MD5

f024f03e302538fdf52bab7f0104a9b7
SHA1

38c460699955ba1e34590db134bbb7357e870f37
SHA256

cab1443c6f3687a751bc3e6a9849fae59e8a60577d03980e6b0d0fe563ccd58e
SHA512

a89a8dcc16d00cd626f044b51cdc1ac6e070dc4204abe64f63a1a9332b14ee539c067217102012a52e73c3bed0ce02c1ea7c01235b8f20c698c7678be8b4225f
SSDEEP

1536:kj9QpvVvgM/AQmSNFONMlszAjUkzfq14y:AGlgf1Au14y

Score

N/A

Malware Config

Signatures

Files

cab1443c6f3687a751bc3e6a9849fae59e8a60577d03980e6b0d0fe563ccd58e
.exe windows x86

0b88064f8371eccdf9f63660742d8aef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord187
ord696
MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord632
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord100
ord614
ord431
ord616
ord617

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xfceqwm
Size: 3KB - Virtual size: 24KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE