d9f049c01be652fb6a000c7e601b079a229472a0860f6632e5c470daec119ba4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9f049c01be652fb6a000c7e601b079a229472a0860f6632e5c470daec119ba4
Size

704KB
MD5

3e6f0a45e584a00bfa3868eb3152c6b2
SHA1

b363487ef9c2206b4f1b15f17519ad4483cb8d2b
SHA256

d9f049c01be652fb6a000c7e601b079a229472a0860f6632e5c470daec119ba4
SHA512

95d499b89117c677e19997e877cef9c983adf38c4ec621f7ab0edcdc6cad8ea7ccf78488e030e11ac1fe936bd6d95b2b2e2ee98d037b2c8ad7d8b5a5ce543e39
SSDEEP

768:QaYsrEnqu+K6uu8FShmH5bBJnBtpayxa02XM:escqu+K6u5F+m9a7XM

Score

1^/10

Malware Config

Signatures

Files

d9f049c01be652fb6a000c7e601b079a229472a0860f6632e5c470daec119ba4
.exe windows x86

3d6af0e24752772c570721a122129b64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaStrI2
_CIcos
_adj_fptan
__vbaFreeVar
__vbaEnd
_adj_fdiv_m64
__vbaLineInputVar
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaStrCmp
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
_CIlog
__vbaFileOpen
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 692KB - Virtual size: 690KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE