976274b2077d177d6801b3eadb1120baf7e6f571c31be97efc0030fd3abc34f5N

Sharing

Copy URL

Twitter E-mail

General

Target

976274b2077d177d6801b3eadb1120baf7e6f571c31be97efc0030fd3abc34f5N
Size

682KB
MD5

00457cb0aca1036a1a597ad1ff009030
SHA1

56f660e5de3a32ba00da9a7873582bdcb8d35eab
SHA256

976274b2077d177d6801b3eadb1120baf7e6f571c31be97efc0030fd3abc34f5
SHA512

e9c6c564b584e5675ad34c9664214f5d017dee89ca40f4d5d15480596415d04b82c300b68a94075b51d1c91a3d07acfc72036f7b93cf7b196647a25cf37984f6
SSDEEP

12288:PskfnppoV3zdSnY0j1AgZOhcpP57+N38dO2H2+2C/JkdF4UWQ:PsQroUYezpPl+Z8dzH2kJc/WQ

Score

1^/10

Malware Config

Signatures

Files

976274b2077d177d6801b3eadb1120baf7e6f571c31be97efc0030fd3abc34f5N
.exe windows:4 windows x86 arch:x86

fd928ebd34f7c219b550bde6530762c5

Code Sign

33:00:00:02:31:32:34:cb:af:a8:ab:9a:4d:00:00:00:00:02:31
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:24

Not After

02-05-2020 21:24

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

54:2d:ff:ef:25:c5:27:9e:cb:96:f2:a3:f5:3a:e4:87:62:ab:03:ec:f0:1a:07:f3:29:39:5c:da:33:88:32:91
Signer

Actual PE Digest

54:2d:ff:ef:25:c5:27:9e:cb:96:f2:a3:f5:3a:e4:87:62:ab:03:ec:f0:1a:07:f3:29:39:5c:da:33:88:32:91

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord644
ord648
ord578
ord100

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd928ebd34f7c219b550bde6530762c5

Code Sign

33:00:00:02:31:32:34:cb:af:a8:ab:9a:4d:00:00:00:00:02:31Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

54:2d:ff:ef:25:c5:27:9e:cb:96:f2:a3:f5:3a:e4:87:62:ab:03:ec:f0:1a:07:f3:29:39:5c:da:33:88:32:91Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 2KB

33:00:00:02:31:32:34:cb:af:a8:ab:9a:4d:00:00:00:00:02:31
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

54:2d:ff:ef:25:c5:27:9e:cb:96:f2:a3:f5:3a:e4:87:62:ab:03:ec:f0:1a:07:f3:29:39:5c:da:33:88:32:91
Signer

.text
Size: 8KB - Virtual size: 7KB

.data
Size: - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 2KB