91a3e96fe2f5d3899c21f39fa4629dace42b439e576e146556091a73c3e3d739 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91a3e96fe2f5d3899c21f39fa4629dace42b439e576e146556091a73c3e3d739
Size

297KB
MD5

52561ece78d42f5d565c25e7b187cf05
SHA1

735e31a4061a8bd7a79a9552a7c37ee84fd38609
SHA256

91a3e96fe2f5d3899c21f39fa4629dace42b439e576e146556091a73c3e3d739
SHA512

e494764c42e25f6a234b759d0fae844303b3eec931825c53e55626c426adef1e3d9b37261c5eb62e1f0b6a40cdff9870d9de510e0e29c03494a5aeddbfa15589
SSDEEP

6144:7COo1CFTVy/xX2TyTRgd8cBA2YwdWE9SlIxKMG85pXT01CxXCjWKENhZmZ1N:2OnFTE5GyRE8wKMOmLKENhZ61N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91a3e96fe2f5d3899c21f39fa4629dace42b439e576e146556091a73c3e3d739

Files

91a3e96fe2f5d3899c21f39fa4629dace42b439e576e146556091a73c3e3d739
.dll regsvr32 windows:4 windows x86

5d2f5abeca268ec50902fd2ebeb9c4ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarTstGt

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 289KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE