0b7108825c2013fbf83828db88e52427495b9e7a2cfeee22c4cdb35c480daf82 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b7108825c2013fbf83828db88e52427495b9e7a2cfeee22c4cdb35c480daf82
Size

150KB
MD5

fa8667146e910da1c7f4aa50f0829294
SHA1

a9d3cefe05d43646c067cac1e67f2fad8697eb03
SHA256

0b7108825c2013fbf83828db88e52427495b9e7a2cfeee22c4cdb35c480daf82
SHA512

c9e417d17881394441466a1becb5832086559112ba03f465420245c808f8b69bb2c6f2c1aaf06424cb8bd219002ee38c3be2bed7d989421e105bc7635fb4672c
SSDEEP

3072:WmA6yMj75U43l7el7EaVjbI9LSGAsySVGF8QR09Lzgn95pIIWPjxA3:WHo75U+Ua9LSgyYGF8Q2Lpljs

Score

N/A

Malware Config

Signatures

Files

0b7108825c2013fbf83828db88e52427495b9e7a2cfeee22c4cdb35c480daf82
.dll regsvr32 windows x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 142KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE