4d0c2f91e18dfa6b2bcb9f48963a45be5dfe13524fa47de3215f9ca216869629 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d0c2f91e18dfa6b2bcb9f48963a45be5dfe13524fa47de3215f9ca216869629
Size

34KB
MD5

e2a97145f4859d4391b642bc012f677b
SHA1

8021066dba53ecd4a5619ef388f1b2938174d794
SHA256

4d0c2f91e18dfa6b2bcb9f48963a45be5dfe13524fa47de3215f9ca216869629
SHA512

25f9fa0face7191676a7904decd5650aa0ee841430a51cf5e8b6cddb85c76fbfde27b3685e36fcb2ebe645bb55fa4b6b3e71f2090ef5d7e1659706aa85942520
SSDEEP

384:93pxzeXUGMHM0nRHr/8fVfBx/NKywjAC9P9CGR/arw3BjaVXk3s2jvBq4EGwsF:RpQXLMsgG9BnBCjRWb27BLw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d0c2f91e18dfa6b2bcb9f48963a45be5dfe13524fa47de3215f9ca216869629

Files

4d0c2f91e18dfa6b2bcb9f48963a45be5dfe13524fa47de3215f9ca216869629
.dll regsvr32 windows x86

5d2f5abeca268ec50902fd2ebeb9c4ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarTstGt

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 23KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE