ffb0ae78ddc2afd8986c96b9fef003c49abea58a2ea3dabd2b598ef252faa285

Sharing

Copy URL Twitter E-mail

General

Target

ffb0ae78ddc2afd8986c96b9fef003c49abea58a2ea3dabd2b598ef252faa285
Size

78KB
MD5

05533c0807e682f57dc78678768cc03c
SHA1

530ce5d54a23c1d7f057e7742873326d98e3ff37
SHA256

ffb0ae78ddc2afd8986c96b9fef003c49abea58a2ea3dabd2b598ef252faa285
SHA512

a5babd18be91f2111ca16ef03574f73d2f201f717d311a5811d011155158a70f168e2f5b71dc773a517e003b4724ebf37763bec065346a93f5b4d4f322aa565e
SSDEEP

768:E4SvngtqjFIVjNbQjNZCiasiUQ7OtLHHheun1OEDw8J1PC0/A:ETn8qj2nbozTQKtLhrn1OE1P3/A

Score

1^/10

Malware Config

Signatures

Files

ffb0ae78ddc2afd8986c96b9fef003c49abea58a2ea3dabd2b598ef252faa285
.exe windows:4 windows x86 arch:x86

be63889866f6bba2109402ee273e5652

Code Sign

33:00:00:00:eb:69:aa:cc:3e:29:9f:2d:39:00:00:00:00:00:eb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2018, 20:19

Not After

23/11/2019, 20:19

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:5d:47:bb:9d:78:1c:f7:91:0c:00:01:00:00:00:5d
Certificate

Issuer

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/09/2018, 20:38

Not After

06/09/2019, 20:38

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0a:59:2b:00:00:00:00:00:3b
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

11/02/2016, 23:24

Not After

09/05/2021, 23:28

Subject

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:c3:13:a0:85:c3:56:e2:99:d7:00:00:00:00:01:c3
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03/07/2018, 20:45

Not After

26/07/2019, 20:45

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c0:27:2e:fd:34:ef:cb:fd:d5:37:61:bf:82:ea:58:6c:e9:fa:e9:27:d4:ef:01:5e:74:ed:41:51:f6:61:20:81
Signer

Actual PE Digest

c0:27:2e:fd:34:ef:cb:fd:d5:37:61:bf:82:ea:58:6c:e9:fa:e9:27:d4:ef:01:5e:74:ed:41:51:f6:61:20:81

Digest Algorithm

sha256

PE Digest Matches

false

e4:7d:0d:4d:fe:37:7d:75:05:f2:d8:ec:3b:ea:3e:87:2c:b4:dd:29
Signer

Actual PE Digest

e4:7d:0d:4d:fe:37:7d:75:05:f2:d8:ec:3b:ea:3e:87:2c:b4:dd:29

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord667
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ProcCallEngine
ord100

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be63889866f6bba2109402ee273e5652

Code Sign

33:00:00:00:eb:69:aa:cc:3e:29:9f:2d:39:00:00:00:00:00:ebCertificate

Extended Key Usages

33:00:00:00:5d:47:bb:9d:78:1c:f7:91:0c:00:01:00:00:00:5dCertificate

Extended Key Usages

61:0a:59:2b:00:00:00:00:00:3bCertificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

33:00:00:01:c3:13:a0:85:c3:56:e2:99:d7:00:00:00:00:01:c3Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

c0:27:2e:fd:34:ef:cb:fd:d5:37:61:bf:82:ea:58:6c:e9:fa:e9:27:d4:ef:01:5e:74:ed:41:51:f6:61:20:81Signer

e4:7d:0d:4d:fe:37:7d:75:05:f2:d8:ec:3b:ea:3e:87:2c:b4:dd:29Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 4KB - Virtual size: 3KB

.data Size: - Virtual size: 812B

.rsrc Size: 56KB - Virtual size: 55KB

33:00:00:00:eb:69:aa:cc:3e:29:9f:2d:39:00:00:00:00:00:eb
Certificate

33:00:00:00:5d:47:bb:9d:78:1c:f7:91:0c:00:01:00:00:00:5d
Certificate

61:0a:59:2b:00:00:00:00:00:3b
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:01:c3:13:a0:85:c3:56:e2:99:d7:00:00:00:00:01:c3
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

c0:27:2e:fd:34:ef:cb:fd:d5:37:61:bf:82:ea:58:6c:e9:fa:e9:27:d4:ef:01:5e:74:ed:41:51:f6:61:20:81
Signer

e4:7d:0d:4d:fe:37:7d:75:05:f2:d8:ec:3b:ea:3e:87:2c:b4:dd:29
Signer

.text
Size: 4KB - Virtual size: 3KB

.data
Size: - Virtual size: 812B

.rsrc
Size: 56KB - Virtual size: 55KB