e616d4d6c1fba823e6ff7fb5e202c07726da622699aa86ccc1422347831a50f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e616d4d6c1fba823e6ff7fb5e202c07726da622699aa86ccc1422347831a50f9
Size

220KB
MD5

3ba9ea66f56b2c5c62a3193058d3236e
SHA1

70c10438ceac16e72b5b5d6d310305d4c1d57fb0
SHA256

e616d4d6c1fba823e6ff7fb5e202c07726da622699aa86ccc1422347831a50f9
SHA512

5d1061ee5a469ddd5cd7fcbc3c5c3e8780994b875cc5cfed5ead49d57cf2785a2f3a461961374b7f61e78ac95bb8c357e8ae4eb764e123d8105ccf2d764a39a4
SSDEEP

3072:/bzTUOj0sd5Ppfl1sUuUbaxK4pLsh+xzMpT9w://Q20SpNXypwh+1MpT9

Score

N/A

Malware Config

Signatures

Files

e616d4d6c1fba823e6ff7fb5e202c07726da622699aa86ccc1422347831a50f9
.exe windows x86

3ccc00258b5ac35836eeecd99a0a92d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
ord587
MethCallEngine
EVENT_SINK_Invoke
ord621
ord516
ord517
ord518
ord626
ord666
Zombie_GetTypeInfo
ord592
ord593
ord300
ord594
ord595
ord303
ord304
ord598
ord599
ord306
ord309
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord711
ord712
ord606
ord713
ord607
ord608
ord531
ord716
ord717
ord319
ProcCallEngine
ord537
ord644
ord538
ord645
ord539
ord648
ord570
ord572
ord681
ord685
ord578
ord100
ord320
ord612
ord321
ord616
ord617
ord619
ord543
ord544
ord546
ord547
ord581

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ