878b452e89aea7bdb33b21920058c5a8d692b6882f5d125d3b0910f99b63d7a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

878b452e89aea7bdb33b21920058c5a8d692b6882f5d125d3b0910f99b63d7a1
Size

24KB
MD5

ca7eb890c02acbce03fc340d2c5114a3
SHA1

7ba363da6f889489d1a87715a849ebf245078da1
SHA256

878b452e89aea7bdb33b21920058c5a8d692b6882f5d125d3b0910f99b63d7a1
SHA512

e3798f2e7cb60ca6bd27ec99588f40111488ac3b19ee103c6c2012eb5debc6dd8063d85637ef384f3f1ed9ca248529d146d4a6e76613422af4eb47458cf878ed
SSDEEP

192:H/OZWz+KpgwqHEVaLTjhKxqwGz8zbGiUzAu5PfIx:H2y+KmDkVaLTjhyVyig5Pf+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
878b452e89aea7bdb33b21920058c5a8d692b6882f5d125d3b0910f99b63d7a1

Files

878b452e89aea7bdb33b21920058c5a8d692b6882f5d125d3b0910f99b63d7a1
.dll regsvr32 windows x86

74c8b51d6aed25aea3530f22513bde68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

MethCallEngine
ord621
ord626
ord660
ord662
ord595
ord632
EVENT_SINK_AddRef
ord528
ord529
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord645
ord648
ord570
ord685
ord101
ord102
ord103
ord689
ord104
ord105
ord546
ord581

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ