0cf837b3205414c9eab93c4f3cc596af94e849821d534ae384802c4eec1e0107 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cf837b3205414c9eab93c4f3cc596af94e849821d534ae384802c4eec1e0107
Size

1.5MB
MD5

25a50c85e061a13e9405e86d6f0009f8
SHA1

a8a5f6961d2811594f45cf850e05c728cf89753c
SHA256

0cf837b3205414c9eab93c4f3cc596af94e849821d534ae384802c4eec1e0107
SHA512

57660e5755ca49910746c791ae8af228c74a73314f46383f63816bb863397e38e89e7273902298b6508891e797d2401adb09b176aff27360c304845c5fc8dea7
SSDEEP

24576:gXgU6K16nuVQ0GMEfmdjAgxCgzoLGveYVWBHW9GxdBMXj+1T5/BSyLYj6:1hUVXEiPMX3Yq29yLSyLC6

Score

N/A

Malware Config

Signatures

Files

0cf837b3205414c9eab93c4f3cc596af94e849821d534ae384802c4eec1e0107
.dll regsvr32 windows x86

65f86b152a104d3dffdd25dcab941d2a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaR8FixI4

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1.5MB - Virtual size: 16.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE