f868d86d8d7b0a78af7c58aeb44ad47cb2f4b0a13530baac06537e9a3f6ab191 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f868d86d8d7b0a78af7c58aeb44ad47cb2f4b0a13530baac06537e9a3f6ab191
Size

332KB
MD5

5093476d072485e26e54dca9f8914ca0
SHA1

fb309403ecc7566e7983781cd3c52a135b86821d
SHA256

f868d86d8d7b0a78af7c58aeb44ad47cb2f4b0a13530baac06537e9a3f6ab191
SHA512

ee8bfd66792554e7381729f500f85b13585e2c06f7cd2c045e59b9d1000d76332a8878f4de70ee835a70e4ec1621c2c55a1b6f01d336c46497d2bd632c2f29ff
SSDEEP

6144:3d9lR3NTkHPl2nXPnnPpvRtt+nDf9eCTPONc80gYk+rB9xob/0Cdo8ZO:DlR3NT4l2/xZADfPTPONDrYkEPgdFU

Score

N/A

Malware Config

Signatures

Files

f868d86d8d7b0a78af7c58aeb44ad47cb2f4b0a13530baac06537e9a3f6ab191
.exe windows x86

a27a62583ecba60ce3aa9065d4216bef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadResource
LoadLibraryA
LockResource
ExitProcess

msvbvm60

ord588
ord589
MethCallEngine
ord516
ord518
ord598
ord520
ord522
ord524
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord617
ord619

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ