0f4f8991e89a1797b24f6f6a1b082cc70bac0e8db49f960a7fb1945304e33b7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f4f8991e89a1797b24f6f6a1b082cc70bac0e8db49f960a7fb1945304e33b7b
Size

556KB
MD5

2c35125407f3d11a91b0be0dde825b57
SHA1

841b6bb54384e409b41841f46b7f8463c411b0a3
SHA256

0f4f8991e89a1797b24f6f6a1b082cc70bac0e8db49f960a7fb1945304e33b7b
SHA512

dd7f1acbcb046074d74f3302bfe82a5e47d89fc6990997e25314a7d41b8cbfe9002811ad91037082b8f01ac18b183af98f4383f4339cf6c1ad94bf63d4167fdc
SSDEEP

12288:GbQZ7C65DfLhGvAfiOrgO99YvNKLYBmbPD8f0RTwmw8M+J:G8hoY6OrgO99YvNWYUbRT

Score

N/A

Malware Config

Signatures

Files

0f4f8991e89a1797b24f6f6a1b082cc70bac0e8db49f960a7fb1945304e33b7b
.dll regsvr32 windows x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 547KB - Virtual size: 10.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE