b4717ce797f44f9f2cffb0687c266d95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4717ce797f44f9f2cffb0687c266d95
Size

120KB
MD5

b4717ce797f44f9f2cffb0687c266d95
SHA1

712ffbe451674b2ec88d94809db5a9390d8daf01
SHA256

e67c95d636425b7c0fe36052656faf0a6189cb138dcb50ee7fc7b35026e9f421
SHA512

17d943b269ecdcfd2cafbc6879bb2b8d50715d1be6417e8ccd72170519ad701a730c2a8efc4fb00875c1e2aba20e324506c44b970abfa2e7c4eaf293ecc5380a
SSDEEP

1536:3eVnWVhCxGBtPRi4iti93MH9iV6MRfWokt9hYesVuKaEmEXVLM22H:snWCUBRRi4itiSHsk/h5Eh9FO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4717ce797f44f9f2cffb0687c266d95

Files

b4717ce797f44f9f2cffb0687c266d95
.dll regsvr32 windows:4 windows x86 arch:x86

33f29791251fd6a575dac1557fe5c884

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

ord588
MethCallEngine
ord660
ord661
ord663
ord592
ord593
ord594
ord595
ord597
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ord533
ord536
ord537
ord645
ord681
ord685
ord101
ord102
ord103
ord104
ord610
ord105
ord616
ord617
ord618
ord619
ord542
ord546
ord581

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ