8ad5c01b2570a0434c77bf4cad385dc60e7f7f79e1cbda46a37606f1556b6ecf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ad5c01b2570a0434c77bf4cad385dc60e7f7f79e1cbda46a37606f1556b6ecf
Size

297KB
MD5

f39dbf9b958afbf4a0d57b53dc7a1bda
SHA1

6927644a21380dcb7668c1091567ad6cab0c515c
SHA256

8ad5c01b2570a0434c77bf4cad385dc60e7f7f79e1cbda46a37606f1556b6ecf
SHA512

0baae657da252f3e0c1da939b2a49baed39cbda65e879e5d71d3722b113ae8f693cf27937eceee7a4c6a34bd8fda5d228aff75e73af2fe95575822f1b1ee8df4
SSDEEP

6144:H3AN/1eIlp1CXFLxtUCkXpEeqd6R8eY5dkBaINx85Ob6En46m31gYf:H3O/1eS1chxuphqd61TOOeE46m31g

Score

N/A

Malware Config

Signatures

Files

8ad5c01b2570a0434c77bf4cad385dc60e7f7f79e1cbda46a37606f1556b6ecf
.dll regsvr32 windows x86

5d2f5abeca268ec50902fd2ebeb9c4ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarTstGt

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 289KB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE