General

  • Target
    RevolutionMacro.exe
  • Size 53.7MB
  • Sample260605-bscc2aa19p
  • SHA256 0024099986d055e7de9f796a87ad6ab1b89b7004d087231f695c926f77fe8abb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • RevolutionMacro.exe
    .exe 53.7MB

RevolutionMacro.exe

  • IMPHASH ce5be2cffed8f0550296169bd3920d85
  • SHA256 0024099986d055e7de9f796a87ad6ab1b89b7004d087231f695c926f77fe8abb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
de:a6:f7:27:2f:d9:25:50:42:33:5b:8c:eb:bc:2f:3e:7b:27:88:40:98:1e:2e:e1:83:34:ce:46:8a:30:07:68
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Revolution Software LLC,O=Revolution Software LLC,L=Portland,ST=Oregon,C=US
Minor OS version
1
Major OS version
6
Entry point
5152
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED
PDB paths