0f1b271bb64c517805bc3cf0229690799ce3a60a600bf2a941313fdc1fb7c21d

Sharing

Copy URL Twitter E-mail

General

Target

0f1b271bb64c517805bc3cf0229690799ce3a60a600bf2a941313fdc1fb7c21d
Size

338KB
MD5

5d0506fb2bb0586acd0549c6a758c766
SHA1

7da3b8b8bd1923a8c8dd497980aba98956e38e48
SHA256

0f1b271bb64c517805bc3cf0229690799ce3a60a600bf2a941313fdc1fb7c21d
SHA512

61b8f07f0760643f5cdebd9854e5a721564034f6a0aafc0502b75a6574984100905a80419c6192e3d978cc035c5266526f3567f52db77fba528aa6ad83400fc4
SSDEEP

6144:OxiO+jL8DPPdrrMd0G3GvFmBF8x0zjXmWUqJEvrj:OxijjL8DPFDXvFmBKSfEvX

Score

N/A

Malware Config

Signatures

Files

0f1b271bb64c517805bc3cf0229690799ce3a60a600bf2a941313fdc1fb7c21d
.exe windows x86

435a93c30f260c4a12c4503cef007d95

Code Sign

01
Certificate

Issuer

CN=SO WHAT,OU=MYLOVE,O=ISGOOD,L=LOVE,ST=Foryou,C=AS

Not Before

18/12/2013, 01:28

Not After

18/12/2015, 01:28

Subject

CN=FFF,OU=GA,O=FLANG IS GOOD MY LOVE GUITAR,L=FASTO,ST=DASTER,C=FF

b0:63:01:c6:7e:f8:a0:d4:6f:4f:81:bf:5b:5f:59:8f:cd:04:88:d5
Signer

Actual PE Digest

b0:63:01:c6:7e:f8:a0:d4:6f:4f:81:bf:5b:5f:59:8f:cd:04:88:d5

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=FFF,OU=GA,O=FLANG IS GOOD MY LOVE GUITAR,L=FASTO,ST=DASTER,C=FF

20/10/2022, 18:39
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
ord587
ord588
_adj_fdiv_m64
__vbaFreeObjList
ord516
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
__vbaStrLike
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
_CIsin
ord709
ord631
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
ord561
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord535
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
ord572
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord616
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr
ord581

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PNG
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

435a93c30f260c4a12c4503cef007d95

Code Sign

01Certificate

b0:63:01:c6:7e:f8:a0:d4:6f:4f:81:bf:5b:5f:59:8f:cd:04:88:d5Signer

Signature Validations

Verification

20/10/2022, 18:39 Valid: false

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 60KB - Virtual size: 59KB

.data Size: 4KB - Virtual size: 32KB

.rsrc Size: 248KB - Virtual size: 247KB

.PNG Size: 20KB - Virtual size: 19KB

01
Certificate

b0:63:01:c6:7e:f8:a0:d4:6f:4f:81:bf:5b:5f:59:8f:cd:04:88:d5
Signer

20/10/2022, 18:39
Valid: false

.text
Size: 60KB - Virtual size: 59KB

.data
Size: 4KB - Virtual size: 32KB

.rsrc
Size: 248KB - Virtual size: 247KB

.PNG
Size: 20KB - Virtual size: 19KB