General

Malware Config

Signatures

Files

• 3d3793e41c3b0017201816cabbdf819083658a4d4b81fb0098995808e59c091e

  .exe windows x86

  d25c3ceedcf7e86e11ea9dac9a98abcb

  
  

  Code Sign

  16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b

  Certificate

  Issuer

  CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

  Not Before

  31-12-2015 00:00

  Not After

  09-07-2019 18:40

  Subject

  CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  01

  Certificate

  Issuer

  CN=HGD soft (c),O=High Grade Develop,C=GH

  Not Before

  15-02-2019 08:39

  Not After

  15-02-2020 08:39

  Subject

  CN=HGD soft (c),O=High Grade Develop,C=GH

  95:58:22:2b:52:84:8e:d1:be:57:41:16:fd:f7:88:0c:0d:2d:34:1a

  Signer

  Actual PE Digest

  95:58:22:2b:52:84:8e:d1:be:57:41:16:fd:f7:88:0c:0d:2d:34:1a

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=HGD soft (c),O=High Grade Develop,C=GH

  15-02-2019 11:03

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvbvm60

  MethCallEngine

  ord631

  ord525

  EVENT_SINK_AddRef

  DllFunctionCall

  EVENT_SINK_Release

  EVENT_SINK_QueryInterface

  __vbaExceptHandler

  ord711

  ProcCallEngine

  ord646

  ord100

  ord616

  ord618

  ord650

  Sections

  .text

  Size: 516KB - Virtual size: 512KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 16KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ