970cc63444fef1b662e0974cdfa932a1348a43cc5b8c76ebd75ac287b0f8b180 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

970cc63444fef1b662e0974cdfa932a1348a43cc5b8c76ebd75ac287b0f8b180
Size

132KB
MD5

4ddb8a01c32d913111a977c2e7235d6a
SHA1

5ca67c6b30b4dae26428b818ac361413ffe20b66
SHA256

970cc63444fef1b662e0974cdfa932a1348a43cc5b8c76ebd75ac287b0f8b180
SHA512

93ec00dd5fd25b3d4b5a567513e8c96dadd928be8601af591a2a4d637209047307a44ced45a45409cb9f92d3fbbf71ae27e9b2227a7215c2741c41b055d4698a
SSDEEP

1536:QVRy9G6se8Fst0+Lsa5fgvGyF0QwYzSQTvO2cXqxE/WrkBG:0s9G6J0+L3f20rYmMvO2cXqxE/WABG

Score

N/A

Malware Config

Signatures

Files

970cc63444fef1b662e0974cdfa932a1348a43cc5b8c76ebd75ac287b0f8b180
.exe windows x86

920ad50db2fbb8dcc211430db96a38b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlMoveMemory

msvbvm60

MethCallEngine
ord516
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord644
ord573
ord681
ord100
ord617
ord619

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ