9dc07e5c8faaf0cb17f3edaa05a23af6abd5eace33f5765d0c9d864fb728005a
- SHA256 9dc07e5c8faaf0cb17f3edaa05a23af6abd5eace33f5765d0c9d864fb728005a
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
Excel-Vba-Select-Multiple-Rows-Based-On-Criteria.exe
Resource
win7-20241023-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Excel-Vba-Select-Multiple-Rows-Based-On-Criteria.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
5 signatures
150 seconds
General
- Target 9dc07e5c8faaf0cb17f3edaa05a23af6abd5eace33f5765d0c9d864fb728005a
- Size 268KB
- Sample241109-31rlgavfja
- SHA256 9dc07e5c8faaf0cb17f3edaa05a23af6abd5eace33f5765d0c9d864fb728005a
- MD5 10b76c7b6145e7a1face3c6f3f7ce91a
- SHA1 9b09aa1a01ee6c70292f9440b3291c50a0cce022
- SHA512 ae8698f1b62c5f628c92a1e7966159ab6853b7e7a6c21a5810a5bf5a8d1488eee95dba9ce417f6092cd2ccc4a55ca34532fe359bf5161dee3277657b7f9c2613
- SSDEEP 6144:Pdl3LnqHy34zHsHV4GHXIMX6X59wFQN1USYkAzJ5IIqtCfgJ0IE6:F8HZzIXIv/MQbxPAN5IIqtMu3
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
9dc07e5c8faaf0cb17f3edaa05a23af6abd5eace33f5765d0c9d864fb728005a.zip 268KB
-
Excel-Vba-Select-Multiple-Rows-Based-On-Criteria.zip.exe 348KB
Excel-Vba-Select-Multiple-Rows-Based-On-Criteria.zip
- IMPHASH 1fdc022135d24d585910f65d062a8c26
- SHA256 19bf98ef9bf96465c9529ca9aadce0939e25712a0ec8283479012b9b7575ac4b
- MD5 f927ce7a0310760dd7cc37c79770a1b8
- SHA1 c61767ecca6c8ddebfec0e635d8d017ab0e17d51
- SHA512 15f3bf407699e8bdd6e22fe517c9d2236645f100e636c1152dd00b577f25cdaea98e91c3219476e8e6c3742e15a7a1cf295c2cf9d31149b0f8d6f572e75edef1
- SSDEEP 6144:QnuLXSw2ac5jLLaEyWf3EmQJFQD+JHNhktJx0toak:Qnu7S1LZyWjgBJT+ct+
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9c:3c:b7:41:04:ee:e2:b5:4c:10:5a:f5:de:4a:12:89:e1:3c:34:51:b9:40:ff:15:a2:4a:2e:58:e3:31:0c:2d
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Vyacheslav Burlakov,O=Vyacheslav Burlakov,L=Togliatti,C=RU,1.2.840.113549.1.9.1=#0c19737570706f72744067726170686963726567696f6e2e636f6d
Chains
Sep 5, 2022
CN=Vyacheslav Burlakov,O=Vyacheslav Burlakov,L=Togliatti,C=RU,1.2.840.113549.1.9.1=#0c19737570706f72744067726170686963726567696f6e2e636f6d
CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
PE Signature issue
Digest
03:42:46:9a:59:28:d8:56:63:06:a0:26:02:d3:22:67:fa:a1:c5:ef
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Vyacheslav Burlakov,O=Vyacheslav Burlakov,L=Togliatti,C=RU,1.2.840.113549.1.9.1=#0c19737570706f72744067726170686963726567696f6e2e636f6d
Chains
Nov 5, 2024
Subject
CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 29, 2015 - Jun 9, 2027
Subject
CN=Vyacheslav Burlakov,O=Vyacheslav Burlakov,L=Togliatti,C=RU,1.2.840.113549.1.9.1=#0c19737570706f72744067726170686963726567696f6e2e636f6d
Serial Number
0e:94:71:bb:c0:a1:54:f9:50:fb:b9:7c:88:67:d0:43
Issuer
CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftKernelCodeSigning
Timespan
Oct 5, 2020 - Oct 5, 2022
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 31, 2021 - Sep 17, 2029
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 29, 2015 - Jun 9, 2027
Subject
CN=Vyacheslav Burlakov,O=Vyacheslav Burlakov,L=Togliatti,C=RU,1.2.840.113549.1.9.1=#0c19737570706f72744067726170686963726567696f6e2e636f6d
Serial Number
0e:94:71:bb:c0:a1:54:f9:50:fb:b9:7c:88:67:d0:43
Issuer
CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftKernelCodeSigning
Timespan
Oct 5, 2020 - Oct 5, 2022
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
5
Entry point
25023
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\fohafadipewo82\zehoz\juyidutibih.pdb
kernel32
GetSystemDefaultLangID
CreateMutexW
GetConsoleAliasesLengthW
InterlockedIncrement
VerSetConditionMask
GetConsoleAliasA
SleepEx
GetFileAttributesExA
WaitNamedPipeW
SetCommTimeouts
EnumResourceTypesA
SetFileShortNameW
LoadLibraryW
GetFileAttributesA
DnsHostnameToComputerNameW
GetConsoleAliasW
GetFileAttributesW
WriteConsoleW
GetBinaryTypeA
IsBadWritePtr
GetGeoInfoA
GetCompressedFileSizeA
GetTimeZoneInformation
GetLastError
GetProcAddress
VirtualAlloc
HeapSize
SetComputerNameA
LoadLibraryA
WriteConsoleA
LocalAlloc
CreateEventW
AddAtomA
FoldStringA
FindNextFileA
GetModuleHandleA
FreeEnvironmentStringsW
SetFileShortNameA
ReadConsoleInputW
GetVersion
EnumResourceLanguagesW
SetFileAttributesW
LCMapStringW
LocalFileTimeToFileTime
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
ExitProcess
SetFilePointer
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
RtlUnwind
HeapAlloc
HeapReAlloc
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RaiseException
GetConsoleOutputCP
CloseHandle
CreateFileA
user32
ClientToScreen
Name
.text
Size
71KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
211KB
Virtual Size
221KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=36, id=132, productName=VS2008 build 21022, version=21022,
count=27, id=149, productName=VS2008 build 21022, version=21022,
count=126, id=131, productName=VS2008 build 21022, version=21022,
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=127, id=1, productName=Unmarked objects,
count=1, id=138, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,