faf1b738e0f4a4c162446f2c851e3ecefd28bea74b3c8ced44cb4e4c48ffaac5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faf1b738e0f4a4c162446f2c851e3ecefd28bea74b3c8ced44cb4e4c48ffaac5
Size

40KB
MD5

20a6c073bbd52cdd2ce1a83297016970
SHA1

41253b95482c0fa0a77d46c0a3aee45942576f8c
SHA256

faf1b738e0f4a4c162446f2c851e3ecefd28bea74b3c8ced44cb4e4c48ffaac5
SHA512

2beb74afda2eb3afba895cd2963d3394c0fdf68d76fdf1942860799c52649275fed9fbf402eedf954045ed3a3028a5b92f5e752d573188a0709492182cd79414
SSDEEP

768:qBrG2ZX+Rr5mO0JyyoOlhDH1gVME3DyO4v4GEnLjFCitos:qBrG2ZX6r5tGBHCWqyRgFV

Score

N/A

Malware Config

Signatures

Files

faf1b738e0f4a4c162446f2c851e3ecefd28bea74b3c8ced44cb4e4c48ffaac5
.exe windows x86

ed386606ce4d607aa8fb494574360765

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

netshell

DllCanUnloadNow

msvbvm60

ord587
ord589
MethCallEngine
ord522
EVENT_SINK_AddRef
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord575
ord100
ord432

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ