8677a839c4f124f96b2c50e9ce43b7690f176900cc17a7036ca04631ae827917 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8677a839c4f124f96b2c50e9ce43b7690f176900cc17a7036ca04631ae827917
Size

80KB
MD5

151e3d55429c946fea1b373482779c80
SHA1

9bd76d4e1ab4951340ef10e925509baabe34042e
SHA256

8677a839c4f124f96b2c50e9ce43b7690f176900cc17a7036ca04631ae827917
SHA512

a26f2d7ea761bf9d9321519d212c5da082c8bd2077527e60011f521cfc2d7120582bdcecbaba967fc7ceb54f04b4f995245a026a7e5379df2a97bac23f886802
SSDEEP

1536:36xRA+sIH1F6uzXKzhdAWJhHR4CXT7P7+w2DV4hvXQ4ZJ9YFhEhYvLshS/:eWsHDfKj4ID7eK9A4ZXYFhEh4LshS/

Score

N/A

Malware Config

Signatures

Files

8677a839c4f124f96b2c50e9ce43b7690f176900cc17a7036ca04631ae827917
.exe windows x86

56fb9247bb526e79b672180cf8273676

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAllAccessesGranted

msvbvm60

ord183
ord698
ord662
ord669
ord592
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord544

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ