6d086138128dc4076460e99e8350ea32f70c75ec30b89389a8d817d98388f617

Sharing

Copy URL Twitter E-mail

General

Target

6d086138128dc4076460e99e8350ea32f70c75ec30b89389a8d817d98388f617
Size

402KB
MD5

497e7e4f25445f328ccf85b7cebda7b0
SHA1

c3b2e5d47409be00ad4e7a905ef300be585df309
SHA256

6d086138128dc4076460e99e8350ea32f70c75ec30b89389a8d817d98388f617
SHA512

57bb796313a7a9504f7d01a75a474112914944bdb1a28bac565e1998da0915c71c66396d50942476fc5a9387563f3a385dfc43e065134fbd06434d5d14a6707f
SSDEEP

6144:zjpRVI+MsCSl/AjgOqMVP86ofql49fhsrK2+l/1i:VSSRAHqqoNojK/1i

Score

N/A

Malware Config

Signatures

Files

6d086138128dc4076460e99e8350ea32f70c75ec30b89389a8d817d98388f617
.exe windows x86

84a1dea516693be32216a6e7ed303259

Code Sign

01
Certificate

Issuer

O=Internet Widgits Pty Ltd,ST=ER,C=FD

Not Before

12/12/2012, 14:48

Not After

12/12/2014, 14:48

Subject

O=Internet Widgits Pty Ltd,ST=Some-State,C=VS

09:22:b0:28:66:38:a7:87:41:70:80:1f:ca:43:73:4b:0f:d8:78:10
Signer

Actual PE Digest

09:22:b0:28:66:38:a7:87:41:70:80:1f:ca:43:73:4b:0f:d8:78:10

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

O=Internet Widgits Pty Ltd,ST=Some-State,C=VS

28/11/2022, 11:52
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AnimateWindow
GetMenu

msvbvm60

ord583
_CIcos
_adj_fptan
ord585
__vbaVarMove
__vbaFreeVar
ord587
__vbaLenBstr
ord588
ord696
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
__vbaStrErrVarCopy
ord517
_adj_fprem1
ord519
__vbaStrCat
__vbaHresultCheckObj
ord556
ord557
_adj_fdiv_m32
ord667
ord593
ord594
ord595
__vbaObjSet
__vbaStrLike
ord596
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
__vbaFPFix
_CIsin
ord709
ord631
__vbaChkstk
EVENT_SINK_AddRef
ord527
__vbaStrCmp
__vbaDateR8
ord560
ord561
__vbaI2I4
DllFunctionCall
__vbaVarLateMemSt
ord563
_adj_fpatan
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaDateVar
ord535
ord536
ord537
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaInStr
_adj_fdiv_m32i
ord572
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord610
__vbaVarAdd
__vbaVarDup
ord612
ord614
ord616
__vbaFpI4
__vbaR8IntI2
_CIatan
__vbaStrMove
ord618
ord650
_allmul
_CItan
__vbaFPInt
_CIexp
__vbaFreeObj
__vbaFreeStr
ord581

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 332KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84a1dea516693be32216a6e7ed303259

Code Sign

01Certificate

09:22:b0:28:66:38:a7:87:41:70:80:1f:ca:43:73:4b:0f:d8:78:10Signer

Signature Validations

Verification

28/11/2022, 11:52 Valid: false

Headers

File Characteristics

Imports

user32

msvbvm60

Sections

.text Size: 60KB - Virtual size: 58KB

.data Size: 4KB - Virtual size: 47KB

.rsrc Size: 332KB - Virtual size: 329KB

01
Certificate

09:22:b0:28:66:38:a7:87:41:70:80:1f:ca:43:73:4b:0f:d8:78:10
Signer

28/11/2022, 11:52
Valid: false

.text
Size: 60KB - Virtual size: 58KB

.data
Size: 4KB - Virtual size: 47KB

.rsrc
Size: 332KB - Virtual size: 329KB