d1ec46503692a455ece4aacb38a8bcdd46ea26da5b4ec028b1230cd940ca3350

Sharing

Copy URL

Twitter E-mail

General

Target

d1ec46503692a455ece4aacb38a8bcdd46ea26da5b4ec028b1230cd940ca3350
Size

250KB
MD5

8e6ef4e640a0852cb8f31d12d409544a
SHA1

5ba3ae0604c81b69e5aeda655b6b8d2ab96be7ed
SHA256

d1ec46503692a455ece4aacb38a8bcdd46ea26da5b4ec028b1230cd940ca3350
SHA512

5f897ca3c389d8c6a1c49a09024cacf45bab2a3d1e656b4956db4a352ef3bbcf7be3d995963f4d83b4c0c05e1f6cc0fae90b80fb4fa5446469986e3835bc73e6
SSDEEP

6144:pA4A4A3clElclc8UGun1TBnIrre5H2VN6D:7ciu11nfsN6D

Score

N/A

Malware Config

Signatures

Files

d1ec46503692a455ece4aacb38a8bcdd46ea26da5b4ec028b1230cd940ca3350
.exe windows x86

a93bef3fd68ded97050534314b84a50c

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-12-2009 22:40

Not After

07-03-2011 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

64:e8:38:79:c6:af:3f:d5:d7:84:a4:f1:34:2b:f5:2b:03:34:e5:5f
Signer

Actual PE Digest

64:e8:38:79:c6:af:3f:d5:d7:84:a4:f1:34:2b:f5:2b:03:34:e5:5f

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

22-11-2010 18:59
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
_CIcos
_adj_fptan
__vbaVarMove
ord586
ord587
__vbaFreeVar
ord588
__vbaLenBstr
__vbaStrVarMove
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
ord698
__vbaFpCDblR8
__vbaFreeObjList
ord517
_adj_fprem1
ord519
__vbaSetSystemError
__vbaHresultCheckObj
ord663
_adj_fdiv_m32
__vbaAryDestruct
__vbaOnError
ord595
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
ord704
ord705
_CIsin
ord525
__vbaChkstk
EVENT_SINK_AddRef
__vbaAryConstruct2
__vbaI2I4
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord609
__vbaFPException
ord717
__vbaDateVar
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
ord610
__vbaStrToAnsi
__vbaVarDup
__vbaFpI4
ord617
_CIatan
ord540
__vbaStrMove
_allmul
__vbaFpCSngR4
_CItan
ord546
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a93bef3fd68ded97050534314b84a50c

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:01:cf:3e:00:00:00:00:00:0fCertificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

61:06:94:2d:00:00:00:00:00:09Certificate

Extended Key Usages

Key Usages

64:e8:38:79:c6:af:3f:d5:d7:84:a4:f1:34:2b:f5:2b:03:34:e5:5fSigner

Signature Validations

Verification

22-11-2010 18:59 Valid: false

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 56KB - Virtual size: 53KB

.data Size: 4KB - Virtual size: 29KB

.rsrc Size: 180KB - Virtual size: 179KB

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:06:94:2d:00:00:00:00:00:09
Certificate

64:e8:38:79:c6:af:3f:d5:d7:84:a4:f1:34:2b:f5:2b:03:34:e5:5f
Signer

22-11-2010 18:59
Valid: false

.text
Size: 56KB - Virtual size: 53KB

.data
Size: 4KB - Virtual size: 29KB

.rsrc
Size: 180KB - Virtual size: 179KB