5aedfe28b732e24924339ee3f3284b5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5aedfe28b732e24924339ee3f3284b5f
Size

2.1MB
MD5

5aedfe28b732e24924339ee3f3284b5f
SHA1

34eeb0fdd2310ddb8a7bbd861abf6cbe5fc4f77d
SHA256

f2b6310df1a9516b4bf437e5b76c0b1a2b8a83cb9c9d34e64d878bb4b91c0733
SHA512

1426265ef4e2f995755c63e663f8af28678b3a94420685b6be2853edfb879855f2414fc051d0c15ce868f229468e8d871475d673b75e34618b90eeed1fb8011f
SSDEEP

49152:8GSFTjQoMZdNu6F4rFZ2Uw7pKrx3nRxJT3tc1Yg74prb/zo/Jmv/+4MN2:rKsosXu6uJZ2T7p43R/T3tcDUpveJmvd

Score

1^/10

Malware Config

Signatures

Files

5aedfe28b732e24924339ee3f3284b5f
.zip
CREDIT ALERT.zip
.zip
CREDIT ALERT.bat
.exe windows x86

9803e125106e036cc1787959d25f9062

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord690
ord585
ord696
ord698
MethCallEngine
ord516
ord518
ord626
ord519
ord667
ord591
ord593
ord594
ord595
ord596
ord598
ord520
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
ord670
ord564
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord714
ord607
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord645
ord648
ord570
ord573
ord681
ord576
ord685
ord100
ord689
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 264KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ