8b99d632f384bc365e1b478dde82e030a5dc3eb51b9f58767bd4012a50d83f8f

Sharing

Copy URL

Twitter E-mail

General

Target

8b99d632f384bc365e1b478dde82e030a5dc3eb51b9f58767bd4012a50d83f8f
Size

814KB
MD5

401072f6b087f742d80cb9b6f4394141
SHA1

58024ebb3fd04470984581b4cdafd732748774e1
SHA256

8b99d632f384bc365e1b478dde82e030a5dc3eb51b9f58767bd4012a50d83f8f
SHA512

422bfc1ea8e0ef7fb7f04325ef619ec7f6c8e865a20d62a7e30e9647186e9d6421f410228ebfc70611413bde8d7ca112536ed42e2e8cd3faec79ac2b2e184375
SSDEEP

12288:LmQZ4NUMNEUHLsrUYVcYkzot2bdOHOJWZDFonFucyJoES+AXV:ZZ4CreJYVcYYoD2OAXV

Score

N/A

Malware Config

Signatures

Files

8b99d632f384bc365e1b478dde82e030a5dc3eb51b9f58767bd4012a50d83f8f
.exe windows x86

4d009ba34d8b42a18cffad22907d9f64

Code Sign

01
Certificate

Issuer

CN=Posteriormente\, el castellano se empezó a asentar en Galicia,O=Portugal se no había gran diferencia entre la lengua que se,C=BR

Not Before

20-11-2018 16:00

Not After

20-11-2019 16:00

Subject

CN=Posteriormente\, el castellano se empezó a asentar en Galicia,O=Portugal se no había gran diferencia entre la lengua que se,C=BR

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:fd:fe:0d:36:0d:ca:a4:5b:8e:5b:a5:ef:b4:d8:1d:2e:7a:b1:16
Signer

Actual PE Digest

1f:fd:fe:0d:36:0d:ca:a4:5b:8e:5b:a5:ef:b4:d8:1d:2e:7a:b1:16

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Posteriormente\, el castellano se empezó a asentar en Galicia,O=Portugal se no había gran diferencia entre la lengua que se,C=BR

20-11-2018 22:14
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaLenBstr
ord697
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaCyI4
DllFunctionCall
_adj_fpatan
__vbaLateIdCallLd
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ord100
__vbaI4Var
__vbaStrToAnsi
__vbaFpI4
ord617
_CIatan
__vbaStrMove
__vbaI4Cy
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 788KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d009ba34d8b42a18cffad22907d9f64

Code Sign

01Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

1f:fd:fe:0d:36:0d:ca:a4:5b:8e:5b:a5:ef:b4:d8:1d:2e:7a:b1:16Signer

Signature Validations

Verification

20-11-2018 22:14 Valid: false

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 788KB - Virtual size: 786KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 12KB - Virtual size: 9KB

01
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

1f:fd:fe:0d:36:0d:ca:a4:5b:8e:5b:a5:ef:b4:d8:1d:2e:7a:b1:16
Signer

20-11-2018 22:14
Valid: false

.text
Size: 788KB - Virtual size: 786KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 12KB - Virtual size: 9KB