3c2b3abaf73e3b4acd3aa7dcddc3458ab33d31349a68a3908fceb117c59c5650

Sharing

Copy URL

Twitter E-mail

General

Target

3c2b3abaf73e3b4acd3aa7dcddc3458ab33d31349a68a3908fceb117c59c5650
Size

978KB
MD5

4ab13794eaf40c67142cabd4461fb324
SHA1

b3cde5b886c125a159e4d928e605a197e1a061cf
SHA256

3c2b3abaf73e3b4acd3aa7dcddc3458ab33d31349a68a3908fceb117c59c5650
SHA512

e4248032e72ec041af143e2ad0166edc5f26f4bc1322bd4a9299c018ce5fe205412a71a4cd24c222eb57f88b3ee9ac0637ff00717b138fd14fc13f1d17de9df9
SSDEEP

24576:MMO1b+cWy/RsbnujuKv7HB2TQLTl8zsESvF6Q:QFWARsbnujuKv7HUULTizsESvwQ

Score

N/A

Malware Config

Signatures

Files

3c2b3abaf73e3b4acd3aa7dcddc3458ab33d31349a68a3908fceb117c59c5650
.exe windows x86

4d7fac1d8595e8c21231e76652f364ba

Code Sign

01
Certificate

Issuer

CN=Akeo Consulting (http://akeo.ie),O=Secunia,C=AU

Not Before

15-10-2018 07:19

Not After

14-10-2023 07:19

Subject

CN=Akeo Consulting (http://akeo.ie),O=Secunia,C=AU

d3:f6:e6:f4:df:28:5e:fe:80:4a:d4:22:f2:19:fb:59:d7:74:71:79:2f:36:1e:e7:bd:70:dc:3c:8c:48:56:94
Signer

Actual PE Digest

d3:f6:e6:f4:df:28:5e:fe:80:4a:d4:22:f2:19:fb:59:d7:74:71:79:2f:36:1e:e7:bd:70:dc:3c:8c:48:56:94

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Akeo Consulting (http://akeo.ie),O=Secunia,C=AU

30-06-2022 15:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
ord594
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaFpR8
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaStrCmp
__vbaAryConstruct2
__vbaVarTstEq
ord561
DllFunctionCall
_adj_fpatan
__vbaLateIdCallLd
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord714
__vbaFPException
ord537
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
ord575
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaI4Var
__vbaVarAdd
__vbaVarDup
__vbaStrToAnsi
ord616
ord617
__vbaVarSetObjAddref
_CIatan
__vbaStrMove
__vbaI4Cy
_allmul
_CItan
__vbaUI1Var
__vbaFPInt
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 952KB - Virtual size: 951KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d7fac1d8595e8c21231e76652f364ba

Code Sign

01Certificate

d3:f6:e6:f4:df:28:5e:fe:80:4a:d4:22:f2:19:fb:59:d7:74:71:79:2f:36:1e:e7:bd:70:dc:3c:8c:48:56:94Signer

Signature Validations

Verification

30-06-2022 15:34 Valid: false

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 952KB - Virtual size: 951KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 16KB - Virtual size: 15KB

01
Certificate

d3:f6:e6:f4:df:28:5e:fe:80:4a:d4:22:f2:19:fb:59:d7:74:71:79:2f:36:1e:e7:bd:70:dc:3c:8c:48:56:94
Signer

30-06-2022 15:34
Valid: false

.text
Size: 952KB - Virtual size: 951KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 16KB - Virtual size: 15KB