d9686bc87c58562ee3874731bb674c7b4731a07a9ace384be7b37851a299470a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9686bc87c58562ee3874731bb674c7b4731a07a9ace384be7b37851a299470a
Size

776KB
MD5

f31f9cdb984e54eb752e00c0384a2fa3
SHA1

cad22b087bda1387925f936ff96dc62055b6b9c1
SHA256

d9686bc87c58562ee3874731bb674c7b4731a07a9ace384be7b37851a299470a
SHA512

c813b6499209668b55d09f7e8f11ebf948baaa47605f1f456399ff85cdc18211a8c2d2e5d029bc8033cb6a226aa021888c1e059b7f54390bc33124d49aaebb0c
SSDEEP

24576:gWb5yHfaSBTA8dQnOqHj8nhE18uyj7hiQDu2:ghHfaSB6DyhE1/i70Q

Score

N/A

Malware Config

Signatures

Files

d9686bc87c58562ee3874731bb674c7b4731a07a9ace384be7b37851a299470a
.dll regsvr32 windows x86

5d2f5abeca268ec50902fd2ebeb9c4ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarTstGt

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 767KB - Virtual size: 37.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE