60f5f04a7fbb0c525f15795dd594b2d5[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60f5f04a7fbb0c525f15795dd594b2d5.bin
Size

579KB
MD5

967ee197a8407d577d54f52d0d35bdee
SHA1

511e772f1c97a6cb24b873c4647781a3292e37a1
SHA256

fa6e54d725497d4f63c35fc20e2ae981bbc75d2d0e88259ce76ae92c47fad729
SHA512

66549a2cbd824cd0e992a61d8fc9a69ed7aafc01963f77e01f1304364a9f1b3af83171219307368852fab2b3bc4a516cf1d7cecfb43ff4cda89d63944c0b7706
SSDEEP

12288:LoU3O0BYP/o24RZ9yGjDGF6vbb/9wTbI2RW3I13DZBFkoj:k+O0BS/o24XVO+b/9wrRKI5ZPky

Score

1^/10

Malware Config

Signatures

Files

60f5f04a7fbb0c525f15795dd594b2d5.bin
.zip

Password: infected
f2777ba8469053dbb35353cf54caf343329dbd721f31de2225eccbfd33d1fd6a.exe
.exe windows x86

Password: infected

0832af79b9d90651deb4b4b348979f66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord690
ord583
ord696
ord698
MethCallEngine
ord516
ord518
ord626
ord519
ord666
ord667
ord591
ord593
ord594
ord595
ord596
ord303
ord598
ord520
ord309
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord563
ord670
ord564
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord713
ord714
ord607
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord645
ord570
ord648
ord573
ord681
ord576
ord685
ord100
ord689
ord616
ord617
ord618
ord619
ord650
ord581

Sections

.text
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ