136323478fd3e7267b27501ec5842ec44521355cde59927d937592072f6eaf7d

Sharing

Copy URL

Twitter E-mail

General

Target

136323478fd3e7267b27501ec5842ec44521355cde59927d937592072f6eaf7d
Size

601KB
MD5

acae2d53ce7306de623253231a20fbfd
SHA1

56d620570ac28af58bff4ef3a84c4881af1935dc
SHA256

136323478fd3e7267b27501ec5842ec44521355cde59927d937592072f6eaf7d
SHA512

ad5a451627c32c2c13960fa316916720b308689fa3f764c421481edaaa571fab6e8e338434d83909c0f889e0a2495dc87af2407f873d9fdc16ff4ee9a6a31b0d
SSDEEP

12288:TMzTIvmI59PFg6uN7Ns9fgZhHSxD0ByLorqfvGkS:F1azCmH+0ByIn

Score

N/A

Malware Config

Signatures

Files

136323478fd3e7267b27501ec5842ec44521355cde59927d937592072f6eaf7d
.exe windows x86

e4a5c52031f95af734c89de4e32fbff2

Code Sign

01
Certificate

Issuer

CN=EATR,O=FEA,C=RE

Not Before

27/01/2019, 20:51

Not After

27/01/2020, 20:51

Subject

CN=EATR,O=FEA,C=RE

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

12:f6:44:86:cb:07:74:30:f7:35:6e:e9:97:95:a0:c4:f1:9b:67:2b:81:e9:49:63:6e:2b:4a:9b:24:14:ab:36
Signer

Actual PE Digest

12:f6:44:86:cb:07:74:30:f7:35:6e:e9:97:95:a0:c4:f1:9b:67:2b:81:e9:49:63:6e:2b:4a:9b:24:14:ab:36

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=EATR,O=FEA,C=RE

27/01/2019, 23:08
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord519
ord660
ord667
ord523
ord632
EVENT_SINK_AddRef
DllFunctionCall
ord671
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord648
ord572
ord574
ord685
ord100
ord616
ord619

Sections

.text
Size: 580KB - Virtual size: 579KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e4a5c52031f95af734c89de4e32fbff2

Code Sign

01Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6Certificate

Extended Key Usages

Key Usages

12:f6:44:86:cb:07:74:30:f7:35:6e:e9:97:95:a0:c4:f1:9b:67:2b:81:e9:49:63:6e:2b:4a:9b:24:14:ab:36Signer

Signature Validations

Verification

27/01/2019, 23:08 Valid: false

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 580KB - Virtual size: 579KB

.data Size: - Virtual size: 3KB

.rsrc Size: 12KB - Virtual size: 9KB

01
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

12:f6:44:86:cb:07:74:30:f7:35:6e:e9:97:95:a0:c4:f1:9b:67:2b:81:e9:49:63:6e:2b:4a:9b:24:14:ab:36
Signer

27/01/2019, 23:08
Valid: false

.text
Size: 580KB - Virtual size: 579KB

.data
Size: - Virtual size: 3KB

.rsrc
Size: 12KB - Virtual size: 9KB