ddabb87a083de05a98126f93637eb3115eee42296be45ff1ded06ddde1b18f06 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddabb87a083de05a98126f93637eb3115eee42296be45ff1ded06ddde1b18f06
Size

96KB
MD5

59ee1cb8baf3980afda76c4ed776f5ea
SHA1

d5194ce54f4d14172d69cc2cb70872a5e22dd6d7
SHA256

ddabb87a083de05a98126f93637eb3115eee42296be45ff1ded06ddde1b18f06
SHA512

66238746420c447dcbc34ed600da26955054311812d5abebd415b1d3ce2d0aadb6b8708701949be6e1206d1b035ae729f51fb9505039bf0fbb7d647d02b44901
SSDEEP

1536:Icr3FtMT5lNbEtbNc0GWdjfzGr6U8GI9eM83hV:7GLNb6fzGr6U8GI9eM83hV

Score

N/A

Malware Config

Signatures

Files

ddabb87a083de05a98126f93637eb3115eee42296be45ff1ded06ddde1b18f06
.exe windows x86

dd53e20e141e3d4d301097d8787718ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowsHookExA
UnhookWindowsHookEx

kernel32

GetProcAddress
RtlMoveMemory
GlobalFree
GetModuleHandleA
GlobalAlloc

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
ord666
Zombie_GetTypeInfo
EVENT_SINK2_Release
ord300
ord301
ord303
ord598
ord599
ord306
ord307
ord309
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord531
ord716
ord319
ProcCallEngine
ord537
ord644
ord645
ord570
EVENT_SINK2_AddRef
ord681
ord100
ord320
ord321
ord616
ord617
ord619
ord581

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ