2a231b0efeb6c530dd46ce86154dcbaecd1164ebfde200d56f572fb51db8f837

Sharing

Copy URL Twitter E-mail

General

Target

2a231b0efeb6c530dd46ce86154dcbaecd1164ebfde200d56f572fb51db8f837
Size

338KB
MD5

482dc82a5bd07322810781b7432fd0b1
SHA1

5978f8353fa61ac3bb2cab7dc592c5e99e66ac56
SHA256

2a231b0efeb6c530dd46ce86154dcbaecd1164ebfde200d56f572fb51db8f837
SHA512

f6dd44a1db232a748a0b1d53a15e2d6faa23c5aa661f089b2f60c393b9c3b9b09b51405b77cae7b667c89700c1e9737d2c7fe634c63b2334597cd9feeaca8f89
SSDEEP

6144:tO95TKHYSc0HdR0/LIzKl798uM9uDQ7yO/Hk:tO9QHFcCdRuLSKlZ8uMgU7R/E

Score

N/A

Malware Config

Signatures

Files

2a231b0efeb6c530dd46ce86154dcbaecd1164ebfde200d56f572fb51db8f837
.exe windows x86

f3fb330a802c2dbb1893b3149a9860db

Code Sign

01
Certificate

Issuer

O=Internet Widgits Pty Ltd,ST=HU,C=PO

Not Before

05/06/2012, 22:58

Not After

05/06/2014, 22:58

Subject

O=Internet Widgits Pty Ltd,ST=GT,C=OI

1f:ff:54:bb:9c:14:f4:b1:a0:47:14:d1:86:0b:05:3f:0c:8f:cc:74
Signer

Actual PE Digest

1f:ff:54:bb:9c:14:f4:b1:a0:47:14:d1:86:0b:05:3f:0c:8f:cc:74

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

O=Internet Widgits Pty Ltd,ST=GT,C=OI

15/09/2022, 14:52
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
__vbaVarTstGt
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaR8Sgn
ord516
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaVarForInit
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
ord631
__vbaVarCmpGt
__vbaChkstk
ord526
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaVarAbs
__vbaAryConstruct2
DllFunctionCall
_adj_fpatan
__vbaStrR8
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
__vbaFPException
ord537
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaR8Str
_adj_fdiv_m32i
ord572
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ord100
__vbaVarTstNe
ord610
__vbaVarDup
ord612
ord614
ord616
__vbaVarCopy
_CIatan
__vbaStrMove
ord618
ord542
ord650
_allmul
ord545
_CItan
__vbaVarForNext
_CIexp
__vbaFreeStr
ord581

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f3fb330a802c2dbb1893b3149a9860db

Code Sign

01Certificate

1f:ff:54:bb:9c:14:f4:b1:a0:47:14:d1:86:0b:05:3f:0c:8f:cc:74Signer

Signature Validations

Verification

15/09/2022, 14:52 Valid: false

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 36KB - Virtual size: 32KB

.data Size: 4KB - Virtual size: 15KB

.rsrc Size: 292KB - Virtual size: 289KB

01
Certificate

1f:ff:54:bb:9c:14:f4:b1:a0:47:14:d1:86:0b:05:3f:0c:8f:cc:74
Signer

15/09/2022, 14:52
Valid: false

.text
Size: 36KB - Virtual size: 32KB

.data
Size: 4KB - Virtual size: 15KB

.rsrc
Size: 292KB - Virtual size: 289KB