2d5fbe155c52d2aab641ec20a8fa9a180cb662ec339511e6de39e4889493fd1e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d5fbe155c52d2aab641ec20a8fa9a180cb662ec339511e6de39e4889493fd1e
Size

777KB
MD5

4c17996939a9b34efbde8bdfa6d895d1
SHA1

7f6d67bc4e90fe72c31c44848037f72f189dac4f
SHA256

2d5fbe155c52d2aab641ec20a8fa9a180cb662ec339511e6de39e4889493fd1e
SHA512

cce5c95aded929eb4fe291478e987e9ac01421993cb00e00bd2cee93feecc65557dd784b72faf54f48d69ef6e2016c9493b8c24d5de3426f183fcd8a712e87d3
SSDEEP

12288:jrZjKyja1JCBXm60cTXfxRzbSGlbJTjjXQUTQO0WiYDaJWyfUAtBd:Z/+LCBGcdtbrl5ZQONA8KB

Score

1^/10

Malware Config

Signatures

Files

2d5fbe155c52d2aab641ec20a8fa9a180cb662ec339511e6de39e4889493fd1e
.dll regsvr32 windows x86

5d2f5abeca268ec50902fd2ebeb9c4ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarTstGt

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 767KB - Virtual size: 37.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE