f48ea7476fd240ff7bc86e0b1568ad907a7e4b567abbaa8024befd0a88c59ffa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f48ea7476fd240ff7bc86e0b1568ad907a7e4b567abbaa8024befd0a88c59ffa
Size

4.0MB
MD5

d2b797b46090d1cc3e5c4fddfc372748
SHA1

97798ef1c90ce3492387a8c31b802cccd809c2e3
SHA256

f48ea7476fd240ff7bc86e0b1568ad907a7e4b567abbaa8024befd0a88c59ffa
SHA512

b31faaa31a1edff46604d839c36066326ff6203a3749e474bcb5b5954f4875517861e98c5040daafa611877907d02cedf3ea7dbc00e7f26a5490c1ca2fbb9f2d
SSDEEP

49152:1jO4DzvWHl6SA5YTtWZpbaBbjFv9y6o/uomEylllllllWk:dDrol6SAWTtWZpmB3F1yl/A7

Score

N/A

Malware Config

Signatures

Files

f48ea7476fd240ff7bc86e0b1568ad907a7e4b567abbaa8024befd0a88c59ffa
.exe windows x86

d3c4c95df3c543bec9c425b84d1aa81f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord588
MethCallEngine
ord516
ord666
ord592
ord593
ord300
ord594
ord595
ord598
ord599
ord306
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord608
ord531
ord716
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord570
ord571
ord573
ord681
ord685
ord100
ord689
ord613
ord616
ord617
ord650
ord581

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ