b6977e0ee6554ba445cb8f3b43474656117d23188433157337dd4762f4fd9706

Sharing

Copy URL Twitter E-mail

General

Target

b6977e0ee6554ba445cb8f3b43474656117d23188433157337dd4762f4fd9706
Size

202KB
MD5

dfc8ef0fcb981a33ed0b48933872efc7
SHA1

774bceea9248f9abe326497087971cdf2aa8012e
SHA256

b6977e0ee6554ba445cb8f3b43474656117d23188433157337dd4762f4fd9706
SHA512

36dcc88eb0c4b293f4a7fbbf3428ebba5d3ac32192263b6f1430934157a3a13362c27cac15b5f516268160371598f5f0482358181664f30b4cd303c8f018f663
SSDEEP

3072:X1JpDrudHL7KF4W64c9wraNKvj7wFOY6dGGFcJJYBFm5Mj1GU95sD:FJNCdHi4nKCk7wydGGFcWF3116D

Score

N/A

Malware Config

Signatures

Files

b6977e0ee6554ba445cb8f3b43474656117d23188433157337dd4762f4fd9706
.exe windows x86

7e360af1c0c0d17db56c18457e8ad74d

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

45:26:bb:d8:08:d1:bd:4a:3a:a5:f0:9d:c2:1c:8b:2b:28:02:b3:5b
Signer

Actual PE Digest

45:26:bb:d8:08:d1:bd:4a:3a:a5:f0:9d:c2:1c:8b:2b:28:02:b3:5b

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

22/11/2010, 18:59
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
ord589
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
ord698
__vbaFreeObjList
_adj_fprem1
ord519
ord628
__vbaStrCat
__vbaSetSystemError
ord554
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaExitProc
__vbaOnError
__vbaObjSet
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
ord704
ord521
ord707
_CIsin
ord631
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaAryConstruct2
__vbaI2I4
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord609
__vbaFPException
ord717
__vbaDateVar
ord644
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaI4Var
ord610
__vbaInStrB
__vbaStrToAnsi
__vbaVarDup
ord616
__vbaFpI4
_CIatan
ord618
__vbaStrMove
ord541
ord650
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e360af1c0c0d17db56c18457e8ad74d

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:01:cf:3e:00:00:00:00:00:0fCertificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

61:06:94:2d:00:00:00:00:00:09Certificate

Extended Key Usages

Key Usages

45:26:bb:d8:08:d1:bd:4a:3a:a5:f0:9d:c2:1c:8b:2b:28:02:b3:5bSigner

Signature Validations

Verification

22/11/2010, 18:59 Valid: false

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 184KB - Virtual size: 182KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 3KB

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:06:94:2d:00:00:00:00:00:09
Certificate

45:26:bb:d8:08:d1:bd:4a:3a:a5:f0:9d:c2:1c:8b:2b:28:02:b3:5b
Signer

22/11/2010, 18:59
Valid: false

.text
Size: 184KB - Virtual size: 182KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 3KB