79E6622C17398F5A8B81D9B360C12842[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

79E6622C17398F5A8B81D9B360C12842.exe
Size

683KB
MD5

79e6622c17398f5a8b81d9b360c12842
SHA1

64707cff931657909a909af90d76f62b61999409
SHA256

214dddd149dea79f52ec12683a9680c873f7d7d5384aa98aca6947e9f497dff8
SHA512

b43550f87160ff22e0a42a31d9489d9a083aae1e0ab9ca1949f24972975c5438c0b0e88ee4869295b0144e620e20bc08b8221093e8bd2b3678d08c5122c84c1b
SSDEEP

12288:gjHuz+gtJwTDVd8fpP5fZ7Agd+21b0sTzTwTPZ:0QVwTeP5fZj+0zTwTPZ

Score

1^/10

Malware Config

Signatures

Files

79E6622C17398F5A8B81D9B360C12842.exe
.exe windows x86

334cd177517114e383439b93665445b8

Code Sign

07
Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ef:d8:a2:ec:60:a4:82:24
Certificate

Issuer

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

22/12/2017, 21:56

Not After

22/12/2018, 21:56

Subject

CN=SORZANA S A,O=SORZANA S A,L=Villa Maria,ST=Cordoba,C=AR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

32:4a:10:0a:cb:0d:16:5d:00:df:20:a9:33:04:2b:42:e8:1a:a3:96
Signer

Actual PE Digest

32:4a:10:0a:cb:0d:16:5d:00:df:20:a9:33:04:2b:42:e8:1a:a3:96

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SORZANA S A,O=SORZANA S A,L=Villa Maria,ST=Cordoba,C=AR

30/03/2023, 10:57
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord517
ord518
ord519
ord552
ord553
ord660
ord662
ord593
ord300
ord301
ord595
ord596
ord303
ord598
ord599
ord306
ord520
ord307
ord309
ord631
ord709
ord525
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
ord560
ord561
DllFunctionCall
ord563
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord605
ord712
ord606
ord607
ord715
ord608
ord716
ord531
ord532
ord717
ProcCallEngine
ord535
ord644
ord537
ord645
ord570
ord648
ord571
ord572
ord573
ord681
ord576
ord578
ord685
ord100
ord579
ord610
ord612
ord616
ord617
ord618
ord619
ord542
ord650
ord545
ord546
ord580

Sections

.text
Size: 580KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

334cd177517114e383439b93665445b8

Code Sign

07Certificate

Key Usages

ef:d8:a2:ec:60:a4:82:24Certificate

Extended Key Usages

Key Usages

32:4a:10:0a:cb:0d:16:5d:00:df:20:a9:33:04:2b:42:e8:1a:a3:96Signer

Signature Validations

Verification

30/03/2023, 10:57 Valid: false

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 580KB - Virtual size: 577KB

.data Size: - Virtual size: 20KB

.rsrc Size: 96KB - Virtual size: 93KB

07
Certificate

ef:d8:a2:ec:60:a4:82:24
Certificate

32:4a:10:0a:cb:0d:16:5d:00:df:20:a9:33:04:2b:42:e8:1a:a3:96
Signer

30/03/2023, 10:57
Valid: false

.text
Size: 580KB - Virtual size: 577KB

.data
Size: - Virtual size: 20KB

.rsrc
Size: 96KB - Virtual size: 93KB