1cce757e07dc4d6cfde086a4f15c4fc5 | Triage

Sharing

General

Target

1cce757e07dc4d6cfde086a4f15c4fc5
Size

24KB
MD5

1cce757e07dc4d6cfde086a4f15c4fc5
SHA1

da197e9a3f01dca8166403767e57bacc2792b874
SHA256

f4305657723c2320612c31c98943823803f319bcef0584b3d9a8f034ad39b1d1
SHA512

8f3bd62b06e57e9e4bd268cd2c1e59d90f5c0ab472d06282776840b45a32a657d705f2d71da1b9a4dd3d909a1ed59161159b48694d910b6ffc2cca4e47ff35ba
SSDEEP

192:HYY7S2Xc3rQwtdmNmhyb8APO6enWVah8AqEc6R:zovdmN+ybPSWVnE1R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cce757e07dc4d6cfde086a4f15c4fc5

Files

1cce757e07dc4d6cfde086a4f15c4fc5
.dll regsvr32 windows:4 windows x86 arch:x86

85548a98ecc0fad05aba6f149fc0d399

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord101
ord102
ord103
ord104
ord105

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
jxxCnlfNNzpltARfsbozPGtJB

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ