0b75f89b730225e6e99347a03492512c79dd5b507415140590af2514a2d0b8c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b75f89b730225e6e99347a03492512c79dd5b507415140590af2514a2d0b8c1
Size

551KB
MD5

e3f070fbbe91cb800e0d4e99f8a5a123
SHA1

4102324a42aa4161db5fd3ce35db581928f874ce
SHA256

0b75f89b730225e6e99347a03492512c79dd5b507415140590af2514a2d0b8c1
SHA512

b04d5f567b2acd94fb897e9f2c95685d6bad94ada6321a933b1f914d562ffcdfa70c66d24097f92e17372a5e831cf2acf9e3c3e47cd16d108d48473def1af7db
SSDEEP

12288:okzI1kPSe59Yh4jF+Gc9JC5IW0VSbJmf+8bZH5oVC:okzIiSe04jF+JJC5IW09X1

Score

N/A

Malware Config

Signatures

Files

0b75f89b730225e6e99347a03492512c79dd5b507415140590af2514a2d0b8c1
.dll regsvr32 windows x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 542KB - Virtual size: 10.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE