ce4b931f2259cd5f6cc9276b230293b34e0603be7bd1b7800eba64c22f2e15e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce4b931f2259cd5f6cc9276b230293b34e0603be7bd1b7800eba64c22f2e15e0
Size

267KB
MD5

0feb606ba5d5389e1fd6ff87f74551e0
SHA1

eec451bd771fe51ff4ea84aa7d2bf426d885bc96
SHA256

ce4b931f2259cd5f6cc9276b230293b34e0603be7bd1b7800eba64c22f2e15e0
SHA512

fc7c01b53d03a396a7843f897d2c699a83ca9515085e8cf125f80300a1ac073df09b702e48189716815684a4b6964162ecda7bfcae01f1ce2910f11e2d3551e4
SSDEEP

3072:rON91GlzMptvtyC2mjbCJjgiCVLMIj0ng5DsKuC7AsqUw1KdnMEpM3KU7VR:rDlzMptDmEwIjUgOEAsq91KdMEpM3fVR

Score

N/A

Malware Config

Signatures

Files

ce4b931f2259cd5f6cc9276b230293b34e0603be7bd1b7800eba64c22f2e15e0
.exe windows x86

44b123cfc72acb4c5fc87d2126c5f669

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlMoveMemory

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord644
ord100
ord616
ord581

Sections

.text
Size: 160KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ