13290a1d2979d2c46efd09b898f0672f8bc7f61da92e3c4e0d3dab16b9d4dfa1

Sharing

Copy URL Twitter E-mail

General

Target

13290a1d2979d2c46efd09b898f0672f8bc7f61da92e3c4e0d3dab16b9d4dfa1
Size

76KB
MD5

41d432e39351611871430149c0e55f57
SHA1

8c0c842d030a1ba706ffed0962f349d26bad5854
SHA256

13290a1d2979d2c46efd09b898f0672f8bc7f61da92e3c4e0d3dab16b9d4dfa1
SHA512

92d151b3a97822de9e9fb1ae1d00cad0c2d20eeb83dd2f7e6f12f274f7b083f288d2338a9ec21336a89e2480c7f1ed28393ebd2c0a82097336e1f70962bdb123
SSDEEP

768:jsKPbc5bq56lx9+nUBYMprxw6H15bqbksKAu:jsKPObqwlxRprxzHnbq4sKAu

Score

N/A

Malware Config

Signatures

Files

13290a1d2979d2c46efd09b898f0672f8bc7f61da92e3c4e0d3dab16b9d4dfa1
.exe windows x86

02a0ad18a6a4db7b5a9e5d93e4910b42

Code Sign

50:ff:f0:c0:f0:0e:74:73:bd:68:f4:1b:97:1e:e7:47
Certificate

Issuer

CN=zhuxian,O=Mao,1.2.840.113549.1.9.1=#0c134d657465696f6340686f746d61696c2e636f6d

Not Before

08/08/2021, 03:18

Not After

31/12/2039, 23:59

Subject

CN=zhuxian,O=Mao,1.2.840.113549.1.9.1=#0c134d657465696f6340686f746d61696c2e636f6d

1e:b1:32:d5:7e:79:68:96:0d:f2:6e:85:4e:b0:dd:a6
Certificate

Issuer

CN=JemmyLoveJenny SHA1 TimeStamping Services CA,OU=pki.jemmylovejenny.tk,O=JemmyLoveJenny PKI Service,C=CN

Not Before

01/01/2000, 00:00

Not After

31/12/2099, 23:59

Subject

CN=Fake TimeStamp Responder,OU=timestamp.pki.jemmylovejenny.tk,O=JemmyLoveJenny PKI Service,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

1e:b1:32:d5:7e:79:68:96
Certificate

Issuer

CN=JemmyLoveJenny EV Root CA,OU=pki.jemmylovejenny.tk,O=JemmyLoveJenny PKI Service,C=CN

Not Before

01/01/2000, 00:00

Not After

31/12/2099, 23:59

Subject

CN=JemmyLoveJenny SHA1 TimeStamping Services CA,OU=pki.jemmylovejenny.tk,O=JemmyLoveJenny PKI Service,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a5:c3:88:6c:58:de:9d:bc:8e:ea:7f:f0:0e:5a:45:58:08:91:31:1d
Signer

Actual PE Digest

a5:c3:88:6c:58:de:9d:bc:8e:ea:7f:f0:0e:5a:45:58:08:91:31:1d

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=zhuxian,O=Mao,1.2.840.113549.1.9.1=#0c134d657465696f6340686f746d61696c2e636f6d

01/04/2011, 00:00
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
ord626
__vbaCopyBytes
__vbaForEachCollAd
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaBoolVarNull
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaObjVar
DllFunctionCall
ord670
__vbaVarOr
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarCmpEq
__vbaStrToAnsi
__vbaVarDup
__vbaLateMemCallLd
_CIatan
_allmul
_CItan
__vbaNextEachCollAd
_CIexp
__vbaFreeObj

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02a0ad18a6a4db7b5a9e5d93e4910b42

Code Sign

50:ff:f0:c0:f0:0e:74:73:bd:68:f4:1b:97:1e:e7:47Certificate

1e:b1:32:d5:7e:79:68:96:0d:f2:6e:85:4e:b0:dd:a6Certificate

Extended Key Usages

Key Usages

1e:b1:32:d5:7e:79:68:96Certificate

Extended Key Usages

Key Usages

a5:c3:88:6c:58:de:9d:bc:8e:ea:7f:f0:0e:5a:45:58:08:91:31:1dSigner

Signature Validations

Verification

01/04/2011, 00:00 Valid: false

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 36KB - Virtual size: 33KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 28KB - Virtual size: 25KB

50:ff:f0:c0:f0:0e:74:73:bd:68:f4:1b:97:1e:e7:47
Certificate

1e:b1:32:d5:7e:79:68:96:0d:f2:6e:85:4e:b0:dd:a6
Certificate

1e:b1:32:d5:7e:79:68:96
Certificate

a5:c3:88:6c:58:de:9d:bc:8e:ea:7f:f0:0e:5a:45:58:08:91:31:1d
Signer

01/04/2011, 00:00
Valid: false

.text
Size: 36KB - Virtual size: 33KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 28KB - Virtual size: 25KB