2bed2f1056e89c3a5208cb18549b8abfb82123a2531640c89405d837512434f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bed2f1056e89c3a5208cb18549b8abfb82123a2531640c89405d837512434f5
Size

548KB
MD5

13e7b0700f0cec092f681dc1997aaa20
SHA1

920d0e69ad96a7c290f51d75ace88df0c9a45ce1
SHA256

2bed2f1056e89c3a5208cb18549b8abfb82123a2531640c89405d837512434f5
SHA512

716ec201c98ccda6bfc6102aa4f20220029e1eff6786e9a55b3cc4c352fce8d8e5f3fd0546c18a4691b862e1c528f21c53a273d7dd34841bd8ae31931be1d8dc
SSDEEP

12288:CaiHGda1WEX0v/cOGyLCvWGgAwmo8lgPWU2QmdCFf+nmx:j4rQa0uYmPAWU2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bed2f1056e89c3a5208cb18549b8abfb82123a2531640c89405d837512434f5

Files

2bed2f1056e89c3a5208cb18549b8abfb82123a2531640c89405d837512434f5
.dll regsvr32 windows x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 538KB - Virtual size: 127.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE