General

Malware Config

Signatures

Files

• e53e7c18a23025bc98f242ebef59c24220842d0098aae334c9874d59177d026e

  .exe windows x86

  217161f6952192a40808c73d715d4332

  
  

  Code Sign

  04:00:00:00:00:01:2f:4e:e1:52:d7

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  13-04-2011 10:00

  Not After

  28-01-2028 12:00

  Subject

  CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

  Not Before

  24-05-2016 00:00

  Not After

  24-06-2027 00:00

  Subject

  CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01

  Certificate

  Issuer

  CN=BlackWood Industry (r) 2016,O=BlackWood Industry (r) 2016,C=DE

  Not Before

  27-03-2019 07:34

  Not After

  26-03-2022 07:34

  Subject

  CN=BlackWood Industry (r) 2016,O=BlackWood Industry (r) 2016,C=DE

  3a:fe:1c:6f:34:65:75:68:a7:79:9b:13:c3:d7:b3:08:0a:3c:bb:e6

  Signer

  Actual PE Digest

  3a:fe:1c:6f:34:65:75:68:a7:79:9b:13:c3:d7:b3:08:0a:3c:bb:e6

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=BlackWood Industry (r) 2016,O=BlackWood Industry (r) 2016,C=DE

  27-03-2019 10:46

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvbvm60

  ord589

  ord698

  MethCallEngine

  ord518

  ord593

  ord520

  ord521

  ord631

  ord524

  EVENT_SINK_AddRef

  ord528

  ord673

  EVENT_SINK_Release

  EVENT_SINK_QueryInterface

  __vbaExceptHandler

  ord714

  ord608

  ord645

  ord646

  ord574

  ord100

  Sections

  .text

  Size: 516KB - Virtual size: 514KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ