d21bcde6c5e77fdf0836bf3aa9fcc17504e11aba623714f6f8c53a495a1d6f02 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d21bcde6c5e77fdf0836bf3aa9fcc17504e11aba623714f6f8c53a495a1d6f02
Size

140KB
MD5

ecedb75290f0793b7c5e00676710724c
SHA1

f8a3a14973ca741cdd91360db41fe66de3337eee
SHA256

d21bcde6c5e77fdf0836bf3aa9fcc17504e11aba623714f6f8c53a495a1d6f02
SHA512

86329de523f4c426cc7f2d8fde648ba08a6d4b51eedac7422065531170420d55fdef8a8018d406caa88e8bcf65fa1202f2b57cfd7febed85e225fa764ea9260b
SSDEEP

1536:yFZoN1+F6eKZO2DXseqFC9jtoIKk5M8nKJS4p5oaLBhHSN/CTPt+8:eoyFpEO2DXseqSo05xx4Qb0Tl+

Score

N/A

Malware Config

Signatures

Files

d21bcde6c5e77fdf0836bf3aa9fcc17504e11aba623714f6f8c53a495a1d6f02
.exe windows x86

5e6d3c3d493cb620981b1c566e07e126

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord697
ord698
MethCallEngine
ord516
ord517
ord518
ord519
ord594
ord301
ord303
ord598
ord306
ord520
ord307
ord309
ord631
ord709
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
ord670
EVENT_SINK_Release
ord679
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord607
ord608
ord318
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord680
ord681
ord578
ord100
ord579
ord689
ord616
ord617
ord618
ord619
ord544

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ndzquhz
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE