1ac2c48d5f9943e32d91ca97a07db1be7626a71045f87f14a76b2c937eee301a | Triage

Sharing

General

Target

1ac2c48d5f9943e32d91ca97a07db1be7626a71045f87f14a76b2c937eee301a
Size

64KB
MD5

5a372c3aaf6d6e3512bc44e638b3795b
SHA1

5c778f8406eea14cff275001b98f844d94536ee7
SHA256

1ac2c48d5f9943e32d91ca97a07db1be7626a71045f87f14a76b2c937eee301a
SHA512

2f3792831227b4a8eee11877fe0a9e62e316ec13b83f238a519b4d7823f0f310c4108fe096cbd455f7355ff28f8fbd77db2ccbd0569e3b28bb4bc0537b513700
SSDEEP

768:aqlzu9mmvqjeUH7KWbMsNY5fMuVWqmvU+j31AZpV4e:pECoi07

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ac2c48d5f9943e32d91ca97a07db1be7626a71045f87f14a76b2c937eee301a

Files

1ac2c48d5f9943e32d91ca97a07db1be7626a71045f87f14a76b2c937eee301a
.dll regsvr32 windows:4 windows x86 arch:x86

4f9c07eb756f43e95c54988d5f6c6eba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

MethCallEngine
ord626
ord519
ord595
ord598
ord520
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord685
ord101
ord102
ord103
ord104
ord105
ord616
ord617
ord618
ord546

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ