d8af9cc5f7677af3c5c5084543afee3c395ee1fe2acb8baeb83052fe81315ebd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8af9cc5f7677af3c5c5084543afee3c395ee1fe2acb8baeb83052fe81315ebd
Size

742KB
MD5

573105fdd322ba3248d5dcc694f9f847
SHA1

f3dd5a738a781eda8b54249a2ab71c9901a73296
SHA256

d8af9cc5f7677af3c5c5084543afee3c395ee1fe2acb8baeb83052fe81315ebd
SHA512

39b3aff5136e16cd3888ee96f13b2df0a5f7f2c62faff67e996752b566711c1d31832516de190a49f1c407bca456537b4aa8bc7362f1c7b7e4be8821ed410d27
SSDEEP

12288:1oY8jNbD9ZH559ouasgdcbLA1SytmjhfYm56GsxRo1ZUB30s9p/B7y2hxrds:1oYw9ZHbiNdI0Sqwh5cGsxa1ZUBr9dBY

Score

N/A

Malware Config

Signatures

Files

d8af9cc5f7677af3c5c5084543afee3c395ee1fe2acb8baeb83052fe81315ebd
.dll regsvr32 windows x86

5d2f5abeca268ec50902fd2ebeb9c4ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarTstGt

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 732KB - Virtual size: 9.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE