65f20017ad87999ddf973dc30c0d318812645e1083ce13886a28d3577fb4b901 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65f20017ad87999ddf973dc30c0d318812645e1083ce13886a28d3577fb4b901
Size

80KB
MD5

3a80a210a34d7c800baf07d6a601e720
SHA1

8384a13852d46fa944dcba0d1bc799ec4cf6b2d3
SHA256

65f20017ad87999ddf973dc30c0d318812645e1083ce13886a28d3577fb4b901
SHA512

4540ae73a9b3b80dd803b1511e12fe134ea82a3e81351c837ec158eec92b15b588691c7cf0671c1cf7aee2383382a22901108cc013398852e8ac8179671fc319
SSDEEP

1536:rlL/HM5BqqCB6ATX3jpSk1ASwhnCZoOC5AhveAvXnJEhYvLsJg4Zz:5M/CBJlHiBnCKOCxA/JEh4LsJguz

Score

N/A

Malware Config

Signatures

Files

65f20017ad87999ddf973dc30c0d318812645e1083ce13886a28d3577fb4b901
.exe windows x86

56fb9247bb526e79b672180cf8273676

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAllAccessesGranted

msvbvm60

ord183
ord698
ord662
ord669
ord592
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord544

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ