AutoRegister[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AutoRegister.exe
Size

20KB
MD5

2c128b5a6cca4ff0891e2a2667739e77
SHA1

2c20b44965aae7b48134b7f6139a9e1774e21e8c
SHA256

700d7d8cde541a3d28fabf0274cf70d55df02a9fc67aa38e7dfedd6dd37fb198
SHA512

d3eed1cfcb1733653e4abe7f81773fa43ca3e3a700c4f6e15dfd98134138d491f1575533d0d0a46ff52a03adff9f259a7be99560d79dc7b0e693f52d38cddd5b
SSDEEP

192:+/izilWw/Rz4KCTWDqYPn21PtkcVncVgOUcZrDsO+TlNcv6P:+/bN4KCTWDqYf2NtkcVncVgOUc5DsDn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AutoRegister.exe

Files

AutoRegister.exe
.exe windows x86

5258bf8ea1218ba6bd2f6278a3ba03eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
ord576
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ