bd2bec94fa9f2e016746345f7073f0326799113e411b6c8c22a44d60c9c667ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd2bec94fa9f2e016746345f7073f0326799113e411b6c8c22a44d60c9c667ae
Size

393KB
MD5

91c8867fda492559cd65258ff00ca5e5
SHA1

ed0a8f39912e31649e695bc2d2a183836230efcc
SHA256

bd2bec94fa9f2e016746345f7073f0326799113e411b6c8c22a44d60c9c667ae
SHA512

5cb1fc90da878998a9360fd7acb59eaea29e644a94c60ec5a414b80563aba16d5fe4c44b5a0317c7366d00279919ca06d887fcc7eba8d94a4ff714715ab78e76
SSDEEP

6144:9gHtZKscfVnKLfdrONmVnqByVR+EhII84kVbpP5gZan52T52tW07uGKOYR:mN3cfVorONhY3WXqe5qWK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd2bec94fa9f2e016746345f7073f0326799113e411b6c8c22a44d60c9c667ae

Files

bd2bec94fa9f2e016746345f7073f0326799113e411b6c8c22a44d60c9c667ae
.dll regsvr32 windows:4 windows x86 arch:x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 384KB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE