5cc870a54b9cf9f98ddfb7a7a574c41afe30205368c9665eeefea1652316a20c

Sharing

Copy URL

Twitter E-mail

General

Target

5cc870a54b9cf9f98ddfb7a7a574c41afe30205368c9665eeefea1652316a20c
Size

1.8MB
MD5

52a4eba0459f9fed7d54a50790b85482
SHA1

091b583ad84dcac1b7d50ecb561186d091526428
SHA256

5cc870a54b9cf9f98ddfb7a7a574c41afe30205368c9665eeefea1652316a20c
SHA512

49c2d81910084b5c2144db45fe298357f4a93ff4c7158f853421d768aa0febc29fe848d4b884947eb162741bf9da0b1f14a94a04633b60644d44eb43c46a63d8
SSDEEP

6144:igyvSElwIjYbNAa/BSOYUR9/SDSs2yFahF8CxnyhRZZkHOfkH8mfe8TSgPUw/gGZ:Ru0bOYDfjUUEs55

Score

N/A

Malware Config

Signatures

Files

5cc870a54b9cf9f98ddfb7a7a574c41afe30205368c9665eeefea1652316a20c
.exe windows x86

ca9084576c4eca8970c52a46e9dfcccb

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

64:1e:aa:a5:6a:25:b0:18:d6:82:fb:26:47:01:6a:ce
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

30-10-2017 00:00

Not After

30-10-2018 23:59

Subject

CN=AGIA LIMITED,OU=IT,O=AGIA LIMITED,POSTALCODE=WA14 4RW,STREET=Mansion House\, Manchester Road,L=Altrincham,ST=Cheshire,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:9b:0c:94:cf:40:e5:d0:dc:e7:44:34:c0:81:a5:6e:31:cf:18:18
Signer

Actual PE Digest

7f:9b:0c:94:cf:40:e5:d0:dc:e7:44:34:c0:81:a5:6e:31:cf:18:18

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=AGIA LIMITED,OU=IT,O=AGIA LIMITED,POSTALCODE=WA14 4RW,STREET=Mansion House\, Manchester Road,L=Altrincham,ST=Cheshire,C=GB

30-12-2017 02:05
Valid: true

Chain 1

CN=AGIA LIMITED,OU=IT,O=AGIA LIMITED,POSTALCODE=WA14 4RW,STREET=Mansion House\, Manchester Road,L=Altrincham,ST=Cheshire,C=GB

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
ord589
__vbaFreeVarList
_adj_fdiv_m64
__vbaR8Sgn
ord517
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaOnError
__vbaObjSet
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
ord523
__vbaBoolVarNull
_CIsin
ord632
ord525
__vbaChkstk
ord526
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
__vbaPrintObj
DllFunctionCall
ord563
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord609
__vbaFPException
__vbaLsetFixstrFree
_CIlog
ord570
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord681
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaI4Var
ord610
__vbaAryLock
__vbaVarAdd
__vbaStrToAnsi
__vbaVarDup
__vbaStrComp
__vbaFpI4
ord617
_CIatan
__vbaStrMove
__vbaR8IntI4
__vbaStrVarCopy
__vbaI4Cy
ord542
_allmul
_CItan
ord546
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca9084576c4eca8970c52a46e9dfcccb

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

64:1e:aa:a5:6a:25:b0:18:d6:82:fb:26:47:01:6a:ceCertificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

7f:9b:0c:94:cf:40:e5:d0:dc:e7:44:34:c0:81:a5:6e:31:cf:18:18Signer

Signature Validations

Verification

30-12-2017 02:05 Valid: true

Chain 1

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 12KB - Virtual size: 9KB

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

64:1e:aa:a5:6a:25:b0:18:d6:82:fb:26:47:01:6a:ce
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

7f:9b:0c:94:cf:40:e5:d0:dc:e7:44:34:c0:81:a5:6e:31:cf:18:18
Signer

30-12-2017 02:05
Valid: true

.text
Size: 1.8MB - Virtual size: 1.8MB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 12KB - Virtual size: 9KB