347fa5494e1c9272593c32f3edfd1d213fa083c59387e0b05f5d2c9cb3affa96

Sharing

Copy URL Twitter E-mail

General

Target

347fa5494e1c9272593c32f3edfd1d213fa083c59387e0b05f5d2c9cb3affa96
Size

128KB
MD5

ecc5e513cbbe7b0bac6fc1db97079c7c
SHA1

98961ef7ecb2a42154668d1187b6478e554e80e3
SHA256

347fa5494e1c9272593c32f3edfd1d213fa083c59387e0b05f5d2c9cb3affa96
SHA512

346e33c67acb91d91f9592e589f9cea59a814674682d908f44b2936cc499888531b6076f0a97a149f7ebfbca7b8035cacc5d539d16f599b3e1bb114a3dc1c3fa
SSDEEP

1536:3FYkPz8EAFPE0hUxZH/PkkFu1gVbp++HBKnCRVEXiBbJqJKZH/P3UPPE0Qz8EAWu:3W4fv0kFmgV1++hKo1UMB/ZRM

Score

N/A

Malware Config

Signatures

Files

347fa5494e1c9272593c32f3edfd1d213fa083c59387e0b05f5d2c9cb3affa96
.exe windows x86

585b393a05d2d57ab373c3d4162adfe4

Code Sign

50:ff:f0:c0:f0:0e:74:73:bd:68:f4:1b:97:1e:e7:47
Certificate

Issuer

CN=zhuxian,O=Mao,1.2.840.113549.1.9.1=#0c134d657465696f6340686f746d61696c2e636f6d

Not Before

08/08/2021, 03:18

Not After

31/12/2039, 23:59

Subject

CN=zhuxian,O=Mao,1.2.840.113549.1.9.1=#0c134d657465696f6340686f746d61696c2e636f6d

1e:b1:32:d5:7e:79:68:96:0d:f2:6e:85:4e:b0:dd:a6
Certificate

Issuer

CN=JemmyLoveJenny SHA1 TimeStamping Services CA,OU=pki.jemmylovejenny.tk,O=JemmyLoveJenny PKI Service,C=CN

Not Before

01/01/2000, 00:00

Not After

31/12/2099, 23:59

Subject

CN=Fake TimeStamp Responder,OU=timestamp.pki.jemmylovejenny.tk,O=JemmyLoveJenny PKI Service,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

1e:b1:32:d5:7e:79:68:96
Certificate

Issuer

CN=JemmyLoveJenny EV Root CA,OU=pki.jemmylovejenny.tk,O=JemmyLoveJenny PKI Service,C=CN

Not Before

01/01/2000, 00:00

Not After

31/12/2099, 23:59

Subject

CN=JemmyLoveJenny SHA1 TimeStamping Services CA,OU=pki.jemmylovejenny.tk,O=JemmyLoveJenny PKI Service,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

76:f6:f9:5c:c4:69:28:1b:1e:55:3d:9c:7a:cb:ff:57:93:29:0e:75
Signer

Actual PE Digest

76:f6:f9:5c:c4:69:28:1b:1e:55:3d:9c:7a:cb:ff:57:93:29:0e:75

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=zhuxian,O=Mao,1.2.840.113549.1.9.1=#0c134d657465696f6340686f746d61696c2e636f6d

01/04/2011, 00:00
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord626
ord666
ord667
ord595
ord598
ord520
ord709
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord716
ord531
ord644
ord537
ord645
ord648
ord681
ord100
ord612
ord616
ord617
ord619
ord580

Sections

.text
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

585b393a05d2d57ab373c3d4162adfe4

Code Sign

50:ff:f0:c0:f0:0e:74:73:bd:68:f4:1b:97:1e:e7:47Certificate

1e:b1:32:d5:7e:79:68:96:0d:f2:6e:85:4e:b0:dd:a6Certificate

Extended Key Usages

Key Usages

1e:b1:32:d5:7e:79:68:96Certificate

Extended Key Usages

Key Usages

76:f6:f9:5c:c4:69:28:1b:1e:55:3d:9c:7a:cb:ff:57:93:29:0e:75Signer

Signature Validations

Verification

01/04/2011, 00:00 Valid: false

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 92KB - Virtual size: 90KB

.data Size: - Virtual size: 3KB

.rsrc Size: 28KB - Virtual size: 25KB

50:ff:f0:c0:f0:0e:74:73:bd:68:f4:1b:97:1e:e7:47
Certificate

1e:b1:32:d5:7e:79:68:96:0d:f2:6e:85:4e:b0:dd:a6
Certificate

1e:b1:32:d5:7e:79:68:96
Certificate

76:f6:f9:5c:c4:69:28:1b:1e:55:3d:9c:7a:cb:ff:57:93:29:0e:75
Signer

01/04/2011, 00:00
Valid: false

.text
Size: 92KB - Virtual size: 90KB

.data
Size: - Virtual size: 3KB

.rsrc
Size: 28KB - Virtual size: 25KB