343fee06fdb5508a51dd725a96d22e0409e92f30fc51d99194fdb9cf34f4a9aa

Sharing

Copy URL

Twitter E-mail

General

Target

343fee06fdb5508a51dd725a96d22e0409e92f30fc51d99194fdb9cf34f4a9aa
Size

177KB
MD5

34e6c8e51cd0be39920af0bf9ca524f9
SHA1

d3b3a70e5ee8ffc34d16859653eece14837e8453
SHA256

343fee06fdb5508a51dd725a96d22e0409e92f30fc51d99194fdb9cf34f4a9aa
SHA512

ff14b14fb1a45695956c6b67bacf55aa507d5329dd47ebb112039a95f83b62eb4f5753afc288495128572a1f6a498af6e4a2c86782586ef91604928d24bb734c
SSDEEP

3072:pdXToqv110PQ7nsl6KbkbWJ2zFiJ8Ay9v1OVKFgRRbeqfq/SI19HWf5x9:p3t11nsl6KlK6NR1eYqzWf

Score

N/A

Malware Config

Signatures

Files

343fee06fdb5508a51dd725a96d22e0409e92f30fc51d99194fdb9cf34f4a9aa
.exe windows x86

da62f3fcbea638fb87cc60578481611d

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

75:8f:5e:e8:26:3b:66:94:71:9d:84:34:eb:99:86:08
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

31-10-2007 00:00

Not After

24-11-2010 23:59

Subject

CN=Symantec Corporation,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Symantec Research Labs,O=Symantec Corporation,L=Santa Monica,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:06:6c:de:ae:77:b8:94:c6:ce:64:b6:ab:91:da:a3:15:22:03:dc
Signer

Actual PE Digest

33:06:6c:de:ae:77:b8:94:c6:ce:64:b6:ab:91:da:a3:15:22:03:dc

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Symantec Corporation,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Symantec Research Labs,O=Symantec Corporation,L=Santa Monica,ST=California,C=US

01-07-2010 23:24
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord585
ord588
ord620
ord516
ord517
ord518
ord519
ord660
ord662
ord556
ord558
ord666
ord592
ord593
ord594
ord595
ord598
ord520
ord631
ord525
ord632
ord526
ord529
ord561
DllFunctionCall
ord564
ord600
ord601
__vbaExceptHandler
ord711
ord712
ord606
ord714
ord607
ord608
ord716
ord717
ProcCallEngine
ord535
ord536
ord537
ord644
ord539
ord648
ord570
ord572
ord573
ord681
ord578
ord685
ord100
ord689
ord614
ord616
ord617
ord618
ord619
ord650
ord546
ord581

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da62f3fcbea638fb87cc60578481611d

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

75:8f:5e:e8:26:3b:66:94:71:9d:84:34:eb:99:86:08Certificate

Extended Key Usages

Key Usages

33:06:6c:de:ae:77:b8:94:c6:ce:64:b6:ab:91:da:a3:15:22:03:dcSigner

Signature Validations

Verification

01-07-2010 23:24 Valid: false

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 164KB - Virtual size: 163KB

.data Size: - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 2KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

75:8f:5e:e8:26:3b:66:94:71:9d:84:34:eb:99:86:08
Certificate

33:06:6c:de:ae:77:b8:94:c6:ce:64:b6:ab:91:da:a3:15:22:03:dc
Signer

01-07-2010 23:24
Valid: false

.text
Size: 164KB - Virtual size: 163KB

.data
Size: - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 2KB