efe101cd7899263be20f3a54bf07664679bdcb706acf3a67aafb78fede25c479 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efe101cd7899263be20f3a54bf07664679bdcb706acf3a67aafb78fede25c479
Size

419KB
MD5

3af64e41498632b293bd37b795f3ea73
SHA1

be422e64768207a6ffae227b43f52d8ceef30a9e
SHA256

efe101cd7899263be20f3a54bf07664679bdcb706acf3a67aafb78fede25c479
SHA512

6951e9370d9d795a27c8e22b4ec8d78ac6c8decef3e53d3d1cfaa100b0c88ed0431547dd5b04fc00ffebe537037faa430f19f979a77f0bb04400086a654df64f
SSDEEP

6144:n6yHYwM1dhKSIh9+D9IMSSz89SCkoZvv3WkLIDVBotGpC292XRiZlTmYjiw:n6Rddo+kS8/71v3JhcCoQw

Score

N/A

Malware Config

Signatures

Files

efe101cd7899263be20f3a54bf07664679bdcb706acf3a67aafb78fede25c479
.exe windows x86

153676e12f98c1153eb93046c66084de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord573
ord681
ord685
ord578
ord100
ord616
ord618
ord581

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ