b9398ef18a3ace3d076cea943a5f1d1a2fb5a308ea22414acb27e7f500a0da11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9398ef18a3ace3d076cea943a5f1d1a2fb5a308ea22414acb27e7f500a0da11
Size

292KB
MD5

5f5451e2eb1c24da66dd08a1897bfeca
SHA1

1d1091d42715c316eabd3005bc5312d06b04d082
SHA256

b9398ef18a3ace3d076cea943a5f1d1a2fb5a308ea22414acb27e7f500a0da11
SHA512

3c635b11f3830a23f4a247ea5d704f29921929b8faa23d5450aaef0ef40974ab1c58fd5ece2a562644f0a75fd6d98c97725a19d8f315801a5a68401aae04131a
SSDEEP

6144:0JXK4lRkAehaKuqT+FDlbWuSzYJpuX+PL6q+Tdzkm4Srm1dbFnh:0JXKkWAehJuqT6bWuSzYJUX+MBkm4Sr8

Score

N/A

Malware Config

Signatures

Files

b9398ef18a3ace3d076cea943a5f1d1a2fb5a308ea22414acb27e7f500a0da11
.exe windows x86

07e92d8dd17116c5198e1c09972d3186

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcA

kernel32

GetProcAddress
RtlMoveMemory
LoadLibraryA

msvbvm60

MethCallEngine
ord666
ord593
ord594
ord598
ord599
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord716
ProcCallEngine
ord537
ord644
ord645
ord648
ord570
ord576
ord685
ord100
ord579
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ