d47fa7c1022978bc77e7c14679dc79d3

Sharing

Copy URL

Twitter E-mail

General

Target

d47fa7c1022978bc77e7c14679dc79d3
Size

37KB
MD5

d47fa7c1022978bc77e7c14679dc79d3
SHA1

3a55ceec82b0bf3082f8eeb42902134de48c56dd
SHA256

1148d0f3b3277d7b7e5d3299b32b168bd2dba15c8649d1dafdb80bba0554b0e1
SHA512

ca63231b08db3a6669468bbafec70868c1753e023d7b5c62f81e5b2b9e5b97515bb1a60a89a46348da3de65bff6fcb99ab3e4f5557e709d6e898bf3dd8835f47
SSDEEP

384:d94SUUXJLOZFlRkjIV6e4+i1Pk1ShFFLD/z+YunVp8YEOzvj:jUqSFby+Cs43/ybnVp8YEOzvj

Score

1^/10

Malware Config

Signatures

Files

d47fa7c1022978bc77e7c14679dc79d3
.exe windows:4 windows x86 arch:x86

e6b24fd0f68e78c765de2a8057e3af58

Code Sign

01
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

01/08/1996, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

0a
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

06/08/2003, 00:00

Not After

05/08/2013, 23:59

Subject

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3e:c0:bc
Certificate

Issuer

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Not Before

08/11/2004, 15:31

Not After

08/11/2005, 15:31

Subject

CN=R.S. RomanService di Ionel Sabadac,OU=Development,O=R.S. RomanService di Ionel Sabadac,L=Milano,ST=Italy,C=IT

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

3f:e9:67:03:10:c4:c4:80:1d:2b:2b:a3:7e:65:40:99:db:14:52:a5
Signer

Actual PE Digest

3f:e9:67:03:10:c4:c4:80:1d:2b:2b:a3:7e:65:40:99:db:14:52:a5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaRecAnsiToUni
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaVarIndexLoad
__vbaVarTstLt
_CIsin
__vbaErase
__vbaVargVarMove
__vbaChkstk
ord526
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
ord601
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord607
__vbaVarDiv
__vbaFPException
ord537
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaI4Var
__vbaAryLock
__vbaVarAdd
__vbaStrToAnsi
__vbaVarCopy
ord616
__vbaVarTstGe
_CIatan
__vbaStrMove
_allmul
_CItan
ord546
__vbaAryUnlock
_CIexp
__vbaFreeStr

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6b24fd0f68e78c765de2a8057e3af58

Code Sign

01Certificate

0aCertificate

Extended Key Usages

Key Usages

3e:c0:bcCertificate

Extended Key Usages

3f:e9:67:03:10:c4:c4:80:1d:2b:2b:a3:7e:65:40:99:db:14:52:a5Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 20KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 2KB

01
Certificate

0a
Certificate

3e:c0:bc
Certificate

3f:e9:67:03:10:c4:c4:80:1d:2b:2b:a3:7e:65:40:99:db:14:52:a5
Signer

.text
Size: 20KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 2KB