Copy_2_of_FCElab[.]dll

General

Target
Copy_2_of_FCElab.dll
Size 456KB
Sample261110-1185eact2k
SHA256 229a79a3097cde86e8d5a481fca9d361793f36aa1bb91315b02d46e82c7e7216
MD5 af8fc7b9d09d778b4896a9888e69d259
SHA1 9e57e36081d67f6dac7540aaf12aac798f57af70
SHA512 bc841ac3785145e27855e56ceaf25fea7a83e98886ad1e52f576ba64ee88c09057bfb0c42ad701c2a2f35f3f50bb0f9a4978110f79376f79650c86b0e8f0c02a
SSDEEP 12288:I+6abmKFP/moaZtcttwt5BOdgcNikGonxnG6gsii:I+6ayGqh5BOdgcNikGonxnG6gsii
TLSH
T115A4E522E3E2E12FF1820030571B77A65939BE775949E14FB780DDACA839CDB8265317
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Copy_2_of_FCElab.dll

File Explorer

Copy_2_of_FCElab.dll

.dll 456KB

Copy_2_of_FCElab.dll

IMPHASH 607907f9773a83911e4dcde006186750
SHA256 229a79a3097cde86e8d5a481fca9d361793f36aa1bb91315b02d46e82c7e7216
MD5 af8fc7b9d09d778b4896a9888e69d259
SHA1 9e57e36081d67f6dac7540aaf12aac798f57af70
SHA512 bc841ac3785145e27855e56ceaf25fea7a83e98886ad1e52f576ba64ee88c09057bfb0c42ad701c2a2f35f3f50bb0f9a4978110f79376f79650c86b0e8f0c02a
SSDEEP 12288:I+6abmKFP/moaZtcttwt5BOdgcNikGonxnG6gsii:I+6ayGqh5BOdgcNikGonxnG6gsii
TLSH
T115A4E522E3E2E12FF1820030571B77A65939BE775949E14FB780DDACA839CDB8265317
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10904

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvbvm60

ord582 __vbaVarTstGt __vbaVarSub ord583 __vbaStrI2 _CIcos _adj_fptan ord585 __vbaStrI4 __vbaVarMove __vbaRedimPreserveVar __vbaVarVargNofree __vbaFpCDblR4 __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaVarIndexStore __vbaFreeObjList ord516 _adj_fprem1 ord518 __vbaI2Abs __vbaResume __vbaStrCat __vbaVarCmpNe __vbaBoolErrVar ord660 __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj __vbaLenBstrB ord556 __vbaVargVarCopy __vbaLenVar _adj_fdiv_m32 __vbaVarTstLe __vbaVarCmpGe __vbaAryDestruct __vbaVarIndexLoadRefLock ord592 __vbaExitProc __vbaI4Abs __vbaStrLike __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad __vbaFpR4 __vbaBoolVar ord520 __vbaVarTstLt __vbaFpR8 __vbaBoolVarNull __vbaRefVarAry _CIsin __vbaErase ord632 __vbaVargVarMove __vbaVarCmpGt __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaVarAbs __vbaGenerateBoundsError ord528 __vbaStrCmp __vbaGet3 __vbaAryConstruct2 __vbaVarTstEq __vbaR4Str __vbaI2I4 ord561 __vbaVarLikeVar DllFunctionCall ord563 __vbaVarOr __vbaStrR4 __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaStrR8 __vbaRedim EVENT_SINK_Release __vbaNew _CIsqrt __vbaRedimVar __vbaVarAnd __vbaObjIs EVENT_SINK_QueryInterface __vbaVarMul __vbaExceptHandler ord711 __vbaStrToUnicode ord712 __vbaR4ErrVar _adj_fprem _adj_fdivr_m64 ord714 __vbaR8ErrVar __vbaVarDiv ord607 __vbaVarCmpLe __vbaFPException __vbaInStrVar __vbaUbound __vbaStrVarVal __vbaVarCat __vbaI2Var ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord648 ord570 __vbaVarInt _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaVarNot __vbaFreeStrList __vbaVarCmpLt _adj_fdivr_m32 __vbaPowerR8 __vbaR8Var _adj_fdiv_r ord685 __vbaVarTstNe ord101 ord102 ord103 __vbaVarCmpEq ord104 ord105 __vbaAryLock __vbaVarAdd __vbaVarDup __vbaStrToAnsi ord613 ord614 __vbaFpI2 __vbaVarTstGe __vbaFpI4 __vbaVarCopy __vbaR8IntI2 ord617 _CIatan ord618 __vbaCastObj __vbaStrMove ord619 __vbaR8IntI4 __vbaStrVarCopy _allmul _CItan ord546 __vbaFPInt __vbaAryUnlock __vbaFpCSngR8 _CIexp __vbaFreeObj __vbaFreeStr __vbaI4ErrVar ord581

Sharing