bf47311f3a8403b1211d784e1c0091f6eb72ae92201e0c87e4a5acc5d2ffe70c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf47311f3a8403b1211d784e1c0091f6eb72ae92201e0c87e4a5acc5d2ffe70c
Size

767KB
MD5

9bcc2090b934c66db54f5f98de502637
SHA1

22395844f771078c795a1a438e1f3788c95b4063
SHA256

bf47311f3a8403b1211d784e1c0091f6eb72ae92201e0c87e4a5acc5d2ffe70c
SHA512

64a3f107437c8f5edb578a077db9b1110eab5764771db452c74bf8326d55e951e10853a6cd5cc219e5867fd1fc2ef5472419e6c687dfeef1e04fbfb5e3aa14ae
SSDEEP

12288:hrm6l2LI8WUiTGCJVuums4Ndgj2ucAwViJYIwPCafjapOZ+oUgbSeJA/09M18TZN:hPsINdOumskdgfcAIiJYhT+pOsoUmBqP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf47311f3a8403b1211d784e1c0091f6eb72ae92201e0c87e4a5acc5d2ffe70c

Files

bf47311f3a8403b1211d784e1c0091f6eb72ae92201e0c87e4a5acc5d2ffe70c
.dll regsvr32 windows x86

5d2f5abeca268ec50902fd2ebeb9c4ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarTstGt

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 753KB - Virtual size: 22.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE