PPT2HTML[.]EXE

Sharing

Copy URL

Twitter E-mail

General

Target

PPT2HTML.EXE
Size

2.4MB
MD5

15051c49af0e7f97aa7604e48f1c6b2d
SHA1

4fbb3e4b2fc5a815707eff15566338f954d5c01a
SHA256

2bd914d57bf6b0f6198046ab7a038e3f4fc88845fdae71dc488db60cc45abf32
SHA512

18c9955623efeea3979f1a325c3b7740bc972aedba6a0f8b2eac20c0f2d057fdf3592b828cfc48b8110ea331454c6018f04820293caf43d135e4bc2d7bacb10e
SSDEEP

49152:KQoD7WqtLhEG2zwa5eoL2Q0HAIQV48FwHFGBf04t39TaBKjz+vITZ9rkjoXgA7:KQk7WqwG2kA4AIKFYG045Z3TLFXf7

Score

1^/10

Malware Config

Signatures

Files

PPT2HTML.EXE
.exe windows x86

d221b1dc8c3a08622f6512e7876527c8

Code Sign

85:70:98:57:10:69:48:f1:66:08:ce:78:64:6a:83:5b
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-01-2018 00:00

Not After

02-01-2022 23:59

Subject

CN=PPTools (Stephen Rindsberg),O=PPTools (Stephen Rindsberg),POSTALCODE=45219-1127,STREET=2324 Muriel Court,L=Cincinnati,ST=OH,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-05-2019 00:00

Not After

01-08-2030 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:55:fd:ac:25:31:24:a9:6d:a4:7e:78:86:cf:20:ca:bc:36:16:98:f3:df:f3:75:f8:ef:a9:b5:0c:32:dc:76
Signer

Actual PE Digest

52:55:fd:ac:25:31:24:a9:6d:a4:7e:78:86:cf:20:ca:bc:36:16:98:f3:df:f3:75:f8:ef:a9:b5:0c:32:dc:76

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateDirectoryA
lstrcpyA
CreateFileA
GetFileAttributesA
lstrlenA
GetTempPathA
lstrcmpA
lstrcatA
ExitProcess
DeleteFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetFileSize
GetLastError
CreateMutexA
GetModuleFileNameA
VirtualAlloc
VirtualFree
GetStartupInfoA

user32

MessageBoxA
wsprintfA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gentee
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d221b1dc8c3a08622f6512e7876527c8

Code Sign

85:70:98:57:10:69:48:f1:66:08:ce:78:64:6a:83:5bCertificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

52:55:fd:ac:25:31:24:a9:6d:a4:7e:78:86:cf:20:ca:bc:36:16:98:f3:df:f3:75:f8:ef:a9:b5:0c:32:dc:76Signer

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.gentee Size: 68KB - Virtual size: 65KB

.rsrc Size: 28KB - Virtual size: 24KB

85:70:98:57:10:69:48:f1:66:08:ce:78:64:6a:83:5b
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

52:55:fd:ac:25:31:24:a9:6d:a4:7e:78:86:cf:20:ca:bc:36:16:98:f3:df:f3:75:f8:ef:a9:b5:0c:32:dc:76
Signer

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB

.gentee
Size: 68KB - Virtual size: 65KB

.rsrc
Size: 28KB - Virtual size: 24KB