General

Malware Config

Signatures

Files

• fb21f5cda1bc7271455720146a12dbf66a7c74acd729818494053891370c9bc1

  .exe windows x86

  7c762fe5d9002cd84edd57c2d6f7e49f

  
  

  Code Sign

  01

  Certificate

  Issuer

  CN=Germany Industry walls filler turret logic programs (c),O=Germany Industry walls filler turret corporation,C=CO

  Not Before

  12-03-2019 16:09

  Not After

  11-03-2022 16:09

  Subject

  CN=Germany Industry walls filler turret logic programs (c),O=Germany Industry walls filler turret corporation,C=CO

  11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

  Not Before

  24-05-2016 00:00

  Not After

  24-06-2027 00:00

  Subject

  CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  04:00:00:00:00:01:2f:4e:e1:52:d7

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  13-04-2011 10:00

  Not After

  28-01-2028 12:00

  Subject

  CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  51:0e:f6:69:00:f8:ad:a2:a7:c3:ab:22:2d:fb:52:52:ef:5c:55:01:f5:11:d0:05:08:12:51:fe:75:7b:65:a3

  Signer

  Actual PE Digest

  51:0e:f6:69:00:f8:ad:a2:a7:c3:ab:22:2d:fb:52:52:ef:5c:55:01:f5:11:d0:05:08:12:51:fe:75:7b:65:a3

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Germany Industry walls filler turret logic programs (c),O=Germany Industry walls filler turret corporation,C=CO

  12-03-2019 22:10

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvbvm60

  ord693

  ord588

  ord698

  MethCallEngine

  ord517

  ord519

  ord521

  ord523

  ord631

  EVENT_SINK_AddRef

  ord527

  ord671

  ord678

  EVENT_SINK_Release

  EVENT_SINK_QueryInterface

  __vbaExceptHandler

  ord537

  ord645

  ord574

  ord100

  Sections

  .text

  Size: 1024KB - Virtual size: 1020KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 32KB - Virtual size: 30KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ