5445078f794bead9e20e4ca1a88d6299d1deb3c10c7a1e1e2bee8d8bb93743b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5445078f794bead9e20e4ca1a88d6299d1deb3c10c7a1e1e2bee8d8bb93743b8
Size

250KB
MD5

7fa1d5b60842b6a7b8416b2702a4e5f5
SHA1

23c2e7dade52b496a92cd59fe8e7a5d15bf2de0b
SHA256

5445078f794bead9e20e4ca1a88d6299d1deb3c10c7a1e1e2bee8d8bb93743b8
SHA512

8f2ef3bbe1471f0162eda1b14fece6ed705aa16c416de6eed38f78f4fbf8973b030378e9674579ef9b5e7ff8bdcc0aca0c1fc170c0911fb913a7fb36a20d06a0
SSDEEP

6144:XTjsblXBbvfowHUERqGNTIgXOa54cPQT7X+zY/OVX+oe:jQxNvggR/oxOsWVXh

Score

N/A

Malware Config

Signatures

Files

5445078f794bead9e20e4ca1a88d6299d1deb3c10c7a1e1e2bee8d8bb93743b8
.dll regsvr32 windows x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 242KB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE