81fe6472d782ecb04f7db20ca64bcd4a9d1a9ce51ebf2a44a42c0bf7be74ebcb

Sharing

Copy URL Twitter E-mail

General

Target

81fe6472d782ecb04f7db20ca64bcd4a9d1a9ce51ebf2a44a42c0bf7be74ebcb
Size

369KB
MD5

606a4935000fba20092a2cc4d9f51f57
SHA1

1e888d62c18613724f1db98227c76af6c909e4f8
SHA256

81fe6472d782ecb04f7db20ca64bcd4a9d1a9ce51ebf2a44a42c0bf7be74ebcb
SHA512

66055716743d95f2fce10a1e19aa8e82a99c2c6f4164ebffeaad3408f9bd8dd1411b8c471b198a061ba3f69e781ba28613a66f7a4500f8465d42249e7fa8c67d
SSDEEP

6144:ksWfxaB5rxMwCwDHumvV7U2MI8YK3s2jzqJ5+/O7f5f64:ksWSMwlOmNbMiMOtf6

Score

N/A

Malware Config

Signatures

Files

81fe6472d782ecb04f7db20ca64bcd4a9d1a9ce51ebf2a44a42c0bf7be74ebcb
.exe windows x86

16a41f3fdba7e0fe1b4fc6c42dcacf13

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

13/04/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:40:5c:1f:0e:d2:58:88:2b:e5:4d:86:86:ba:11:ea:45
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

23/08/2013, 00:00

Not After

23/09/2024, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G1,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

11:21:77:30:89:91:0c:f0:e7:ea:1d:8a:1e:40:3d:53:44:a8
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

14/05/2014, 12:14

Not After

22/08/2015, 11:08

Subject

CN=Cheat Engine,O=Cheat Engine,L=Eindhoven,C=NL,1.2.840.113549.1.9.1=#0c156461726b5f6279746540686f746d61696c2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

43:1f:92:7f:d2:54:db:f3:64:5e:da:e2:70:a6:37:24:8e:9e:a7:8e
Signer

Actual PE Digest

43:1f:92:7f:d2:54:db:f3:64:5e:da:e2:70:a6:37:24:8e:9e:a7:8e

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Cheat Engine,O=Cheat Engine,L=Eindhoven,C=NL,1.2.840.113549.1.9.1=#0c156461726b5f6279746540686f746d61696c2e636f6d

19/06/2014, 09:51
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord696
ord589
MethCallEngine
ord517
__vbaCopyBytes
ord667
ord595
ord631
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord681
ord576
ord685
ord578
ord100
ord616
ord618

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16a41f3fdba7e0fe1b4fc6c42dcacf13

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

04:00:00:00:00:01:2f:4e:e1:35:5cCertificate

Extended Key Usages

Key Usages

11:21:40:5c:1f:0e:d2:58:88:2b:e5:4d:86:86:ba:11:ea:45Certificate

Extended Key Usages

Key Usages

11:21:77:30:89:91:0c:f0:e7:ea:1d:8a:1e:40:3d:53:44:a8Certificate

Extended Key Usages

Key Usages

43:1f:92:7f:d2:54:db:f3:64:5e:da:e2:70:a6:37:24:8e:9e:a7:8eSigner

Signature Validations

Verification

19/06/2014, 09:51 Valid: false

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 64KB - Virtual size: 60KB

.data Size: - Virtual size: 6KB

.rsrc Size: 296KB - Virtual size: 295KB

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

11:21:40:5c:1f:0e:d2:58:88:2b:e5:4d:86:86:ba:11:ea:45
Certificate

11:21:77:30:89:91:0c:f0:e7:ea:1d:8a:1e:40:3d:53:44:a8
Certificate

43:1f:92:7f:d2:54:db:f3:64:5e:da:e2:70:a6:37:24:8e:9e:a7:8e
Signer

19/06/2014, 09:51
Valid: false

.text
Size: 64KB - Virtual size: 60KB

.data
Size: - Virtual size: 6KB

.rsrc
Size: 296KB - Virtual size: 295KB