676ff4e5e85a9efc54e2c39f8ea3d9bd

General

Target

676ff4e5e85a9efc54e2c39f8ea3d9bd
Size

28KB
MD5

676ff4e5e85a9efc54e2c39f8ea3d9bd
SHA1

12c5273d52f4aadedb13d067f5d837ac95678b06
SHA256

669c707b92ef46bb56e385ba65e40650ab31927569f69a3bc8c3e0af56373ee1
SHA512

25d503a3e6a7c7419703cbbc70fc454558cb0774295d12485ba6ba5003b6da139054dfb7177c06f0ea1efadb6e5488b0c5dd089dd3f502971d61b3c381c77f78
SSDEEP

192:x6V12UYDfIF3LSovO3IGAOHG4lH2rpmSFCfre1mlDkAjZy5MGlMf:x6V47jIlY3+GG4lWEDA5pqf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
676ff4e5e85a9efc54e2c39f8ea3d9bd

Files

676ff4e5e85a9efc54e2c39f8ea3d9bd
.dll regsvr32 windows:4 windows x86 arch:x86

2a13abdf169efb003a6b8d6676342f4e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
_adj_fdiv_m64
__vbaRaiseEvent
_adj_fprem1
__vbaRecAnsiToUni
__vbaSetSystemError
__vbaRecDestruct
_adj_fdiv_m32
__vbaAryDestruct
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaVarIndexLoad
_CIsin
__vbaErase
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
ord601
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
__vbaPowerR8
_adj_fdiv_r
ord101
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaAryLock
__vbaStrToAnsi
__vbaFpI4
__vbaRecDestructAnsi
_CIatan
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeStr

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a13abdf169efb003a6b8d6676342f4e

Headers

File Characteristics

Imports

msvbvm60

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 700B

.text
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 700B