546b8c4f6585b2798e4d5103b68516de1cf89d32cca8538bf64c1f8dc12c9c5a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

546b8c4f6585b2798e4d5103b68516de1cf89d32cca8538bf64c1f8dc12c9c5a
Size

256KB
MD5

0432593b0fab1a1b8eb085ee39eb738a
SHA1

113a6c6fe203176daa43bb4d5266f13693b7d9db
SHA256

546b8c4f6585b2798e4d5103b68516de1cf89d32cca8538bf64c1f8dc12c9c5a
SHA512

91fdfd17cee3037460d52a91f5dd46fde76e642d476acb96f701483ede66232b904085920527eecd317872e389e06c7b3ffd8be644d5c3671ea8f9f5ffd35042
SSDEEP

6144:5oKOf5QcBQ1T9zsxNqqcv8hrk60HKi7X0hd+bH03H2uHZ/AR0B:5oScK1T1ANqVSk6Lib0hwbUGuHZIR

Score

1^/10

Malware Config

Signatures

Files

546b8c4f6585b2798e4d5103b68516de1cf89d32cca8538bf64c1f8dc12c9c5a
.dll regsvr32 windows x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 222KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE