be3a33bb830b1fc29b878790383f19243a2385b3b764a966d23c4e4f24606d0d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be3a33bb830b1fc29b878790383f19243a2385b3b764a966d23c4e4f24606d0d
Size

1.0MB
MD5

b998ae6a62eb3d6e0d17d8104b94df76
SHA1

36615d4fafbb2e082f7c4fb3ed6ad25747c412a7
SHA256

be3a33bb830b1fc29b878790383f19243a2385b3b764a966d23c4e4f24606d0d
SHA512

dbd56a571a36df7fc5c9d0a6a00d0129f90bb6f0f0cd40dbf9357726d1e5bf9e7deac704e74591c88d5cbcf6dfcc99bfcf30e453a7c258bdc65a35f0e07ce2e2
SSDEEP

24576:MIDToreP/lxkaNVgSju9Y5LbiAX5aP+r1Rd442MaU:MIoS1xkaPgSKK5Leec+rnd4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be3a33bb830b1fc29b878790383f19243a2385b3b764a966d23c4e4f24606d0d

Files

be3a33bb830b1fc29b878790383f19243a2385b3b764a966d23c4e4f24606d0d
.dll regsvr32 windows:4 windows x86 arch:x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1.0MB - Virtual size: 16.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE