016563e381debf93dace1b8284019e6abfd1cc349437eca23a6433e9245a3f47 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

016563e381debf93dace1b8284019e6abfd1cc349437eca23a6433e9245a3f47
Size

80KB
MD5

9677e8667d9801f6ee400de2a441fa7f
SHA1

dad6dd4ac0a554704cd76c36b248116ea14f61b9
SHA256

016563e381debf93dace1b8284019e6abfd1cc349437eca23a6433e9245a3f47
SHA512

71058e70856e23f9a90fe6262f0e6afac728cbc08e7466b3067a8cb64ac39674660258f070b05957db3ec2691b8d9e6e292641b37c51daa46d135ffe0fd8ee73
SSDEEP

768:K5U6+Im3Wrg1P/CUujh+h1HQe8wL9LNTN0sjnGGG5zjZFR+n+LgAdUWFzmNKvhma:KuP/3T8DMBjU

Score

1^/10

Malware Config

Signatures

Files

016563e381debf93dace1b8284019e6abfd1cc349437eca23a6433e9245a3f47
.exe windows x86

d3dd43f28f74a0f502de09f1c610c7cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaVarTstLe
__vbaAryDestruct
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaBoolVarNull
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaStrR4
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaVarCmpLe
__vbaFPException
__vbaStrVarVal
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaVarCmpLt
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarAdd
_CIatan
__vbaStrMove
__vbaVarNeg
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ