92970c5887fd51617c9bc79c2d4e28afd03bb0ae433f764391fc9b87ea9c2930 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

92970c5887fd51617c9bc79c2d4e28afd03bb0ae433f764391fc9b87ea9c2930
Size

56KB
MD5

502d01ba1f59bc813db0c8657065d9f3
SHA1

3cb94a1c124fa7d3b597f0d96d88c30da2195971
SHA256

92970c5887fd51617c9bc79c2d4e28afd03bb0ae433f764391fc9b87ea9c2930
SHA512

a84413ca1f3416b62444227ebde01cb977c78bb1d7eb222f030ff95574249e3af0b362b51642fab64cccedff19edc1846b359373229663a6eeb132b0de7af214
SSDEEP

768:+rNkCxhVOpoiAUQHbXpUFbqg39y//slW8TlG8s+eX05n8pWHb9PTL11Y6Y8XUxjb:+riCDVFrUQHLGJl3BW8RPavjnQjjK

Score

N/A

Malware Config

Signatures

Files

92970c5887fd51617c9bc79c2d4e28afd03bb0ae433f764391fc9b87ea9c2930
.exe windows x86

1a0a2fa94f6641b75987f50321ddd1c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcA

kernel32

GetProcAddress
FreeResource
LoadResource
SizeofResource
GetModuleHandleA
LoadLibraryA
LockResource
FindResourceA

msvbvm60

ord516
ord626
__vbaCopyBytes
ord666
ord667
ord669
ord593
ord595
ord598
ord631
ord632
ord525
ord526
ord527
ord529
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord535
ord644
ord537
ord645
ord570
ord648
ord100
ord616
ord617
ord580

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ