65d2d3aceafe4b358199494207ea0c47ddd60b021af6cbb3ecd960d20c751a37 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65d2d3aceafe4b358199494207ea0c47ddd60b021af6cbb3ecd960d20c751a37
Size

527KB
MD5

d185c83029b60f52edc781199767901f
SHA1

6c91198ceccb5aaaa2bb56bc45d585ab31c05696
SHA256

65d2d3aceafe4b358199494207ea0c47ddd60b021af6cbb3ecd960d20c751a37
SHA512

9e676f088f5842dec32a043fb44294d89e5cd01b4f60ea812c64b0ebe3f81e41a871c060a07b1d49a5eb65d77c208a53e7dc8981ed099f3b5e050cc0fb5839ef
SSDEEP

12288:q/4qSHUfbXsyuS2/JnltYZhDu+PvkswLzkoOkJ57TPTCaw:qjSHUzgJnr4c+PsswjOaTrC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65d2d3aceafe4b358199494207ea0c47ddd60b021af6cbb3ecd960d20c751a37

Files

65d2d3aceafe4b358199494207ea0c47ddd60b021af6cbb3ecd960d20c751a37
.dll regsvr32 windows x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 518KB - Virtual size: 9.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE