d16677f3028b944fbbf4fb6c5778ede876c0843003b9e5e6d52c91f19dc49f15

Sharing

Copy URL

Twitter E-mail

General

Target

d16677f3028b944fbbf4fb6c5778ede876c0843003b9e5e6d52c91f19dc49f15
Size

291KB
MD5

b75d383a43648d6b141b930408c7af3b
SHA1

37134bb6a9201af0af69a842795a23e9dcad2159
SHA256

d16677f3028b944fbbf4fb6c5778ede876c0843003b9e5e6d52c91f19dc49f15
SHA512

1f6e04b1e89a5cde54cd7339609e2ff1990e47ae83642714ee67846bbd6ad9e608212d2bb8ca1970295171b3ccae8d27a46d7866ca4b6740dbcecde77783ee84
SSDEEP

3072:bfTOvMCIKQjoPFP3dLrOcVsVYMmqeLDnjLMiiA2Rq8NFDRjq3r5jJWFFCVvlM8Sl:bfTO1eoPGcmm5LDnwA2fgWFGOtWRVfI

Score

N/A

Malware Config

Signatures

Files

d16677f3028b944fbbf4fb6c5778ede876c0843003b9e5e6d52c91f19dc49f15
.exe windows x86

374587e6298897b48960cfed9f407208

Code Sign

01
Certificate

Issuer

O=Internet Widgits Pty Ltd,L=EW,ST=SA,C=FD

Not Before

28-10-2012 20:28

Not After

28-10-2014 20:28

Subject

O=Internet Widgits Pty Ltd,ST=FS,C=GF

ee:73:65:25:21:83:7a:c5:13:ac:a2:ba:86:e6:fc:7a:c4:a1:26:a0
Signer

Actual PE Digest

ee:73:65:25:21:83:7a:c5:13:ac:a2:ba:86:e6:fc:7a:c4:a1:26:a0

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

O=Internet Widgits Pty Ltd,ST=FS,C=GF

01-12-2022 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress

user32

GetCapture

gdi32

SetBkMode

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
ord588
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
ord519
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
ord594
ord595
__vbaObjSet
ord596
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
ord631
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
ord561
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord537
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord573
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord610
__vbaVarDup
__vbaStrToAnsi
ord614
__vbaFpI4
ord616
_CIatan
__vbaStrMove
ord618
ord650
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr
ord581

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

374587e6298897b48960cfed9f407208

Code Sign

01Certificate

ee:73:65:25:21:83:7a:c5:13:ac:a2:ba:86:e6:fc:7a:c4:a1:26:a0Signer

Signature Validations

Verification

01-12-2022 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvbvm60

Sections

.text Size: 36KB - Virtual size: 33KB

.data Size: 4KB - Virtual size: 17KB

.rsrc Size: 244KB - Virtual size: 242KB

01
Certificate

ee:73:65:25:21:83:7a:c5:13:ac:a2:ba:86:e6:fc:7a:c4:a1:26:a0
Signer

01-12-2022 14:34
Valid: false

.text
Size: 36KB - Virtual size: 33KB

.data
Size: 4KB - Virtual size: 17KB

.rsrc
Size: 244KB - Virtual size: 242KB