5d26a8b0cc65f2f07a60b5b137fd5b30a99f1de112a78a82de51c196f4763baa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d26a8b0cc65f2f07a60b5b137fd5b30a99f1de112a78a82de51c196f4763baa
Size

454KB
MD5

f25081983bc2ab85fcad2ac5374a730c
SHA1

fd9a706df6fbdd1a4a9d2cc6c5ddd1f406ef0976
SHA256

5d26a8b0cc65f2f07a60b5b137fd5b30a99f1de112a78a82de51c196f4763baa
SHA512

176b03381da173d0c5332ccfa93236153093778bd06994f630caba387a4221fc400731c4abb0e69f94272851bf347ef419b25e334dbdbcd22acb618b00a10cac
SSDEEP

12288:6an8o494nQufxrsdn4R/RkXgnHHQzBATdaitewEPf0mo:6l9iflYnYmgJt0PM

Score

N/A

Malware Config

Signatures

Files

5d26a8b0cc65f2f07a60b5b137fd5b30a99f1de112a78a82de51c196f4763baa
.dll regsvr32 windows x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 445KB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE