e97a69d2f4292cdef29d0be20c97a18a9ab2a9f342968090c1693a59d8861f28

Sharing

Copy URL

Twitter E-mail

General

Target

e97a69d2f4292cdef29d0be20c97a18a9ab2a9f342968090c1693a59d8861f28
Size

934KB
MD5

4564e54eb2e92fb06e46c77ad408469c
SHA1

ad334e5fb885faa1c730b9a2d9dec3c0534762d0
SHA256

e97a69d2f4292cdef29d0be20c97a18a9ab2a9f342968090c1693a59d8861f28
SHA512

9ba57ddae344b6a5406dbedac00307e4a0cc45f59933d574408264ea166a19d7b5041b1f649e72ed97b22713b52f222cc14a1a6b648a8fca0c9d0d369499e3c6
SSDEEP

12288:tqjM/RHVn6P6Ar2i6yxYoyao0iUceoUce/eYob:MjM/RHV6yYzdYoya3Wese/e3

Score

N/A

Malware Config

Signatures

Files

e97a69d2f4292cdef29d0be20c97a18a9ab2a9f342968090c1693a59d8861f28
.exe windows x86

99240c79a0d44648de2c11d591276d77

Code Sign

01
Certificate

Issuer

CN=https://www.FrapsCapture.com,O=Fraps Installer Fengtao Software Inc.\ ,C=GR

Not Before

09-10-2018 15:48

Not After

09-10-2019 15:48

Subject

CN=https://www.FrapsCapture.com,O=Fraps Installer Fengtao Software Inc.\ ,C=GR

4b:df:12:77:e8:af:b4:da:5c:41:ae:3e:c9:67:2e:98:6b:fc:2f:c0:e6:21:0f:22:70:04:f9:65:55:b8:17:68
Signer

Actual PE Digest

4b:df:12:77:e8:af:b4:da:5c:41:ae:3e:c9:67:2e:98:6b:fc:2f:c0:e6:21:0f:22:70:04:f9:65:55:b8:17:68

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=https://www.FrapsCapture.com,O=Fraps Installer Fengtao Software Inc.\ ,C=GR

07-07-2022 13:23
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
_CIcos
_adj_fptan
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
ord593
__vbaFileCloseAll
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaFpR4
__vbaFpR8
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaI2I4
__vbaObjVar
DllFunctionCall
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
__vbaGetOwner3
ord537
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaInStr
__vbaNew2
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord573
__vbaI4Str
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaVarTstNe
__vbaStrToAnsi
ord616
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaFPInt
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 884KB - Virtual size: 883KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99240c79a0d44648de2c11d591276d77

Code Sign

01Certificate

4b:df:12:77:e8:af:b4:da:5c:41:ae:3e:c9:67:2e:98:6b:fc:2f:c0:e6:21:0f:22:70:04:f9:65:55:b8:17:68Signer

Signature Validations

Verification

07-07-2022 13:23 Valid: false

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 884KB - Virtual size: 883KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 40KB - Virtual size: 38KB

01
Certificate

4b:df:12:77:e8:af:b4:da:5c:41:ae:3e:c9:67:2e:98:6b:fc:2f:c0:e6:21:0f:22:70:04:f9:65:55:b8:17:68
Signer

07-07-2022 13:23
Valid: false

.text
Size: 884KB - Virtual size: 883KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 40KB - Virtual size: 38KB