General

Malware Config

Signatures

Files

• Unconfirmed_175655.crdownload

  .exe windows:4 windows x86 arch:x86

  f5c7f08c81ae5e0ba95d55904a2363f1

  
  

  Code Sign

  16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b

  Certificate

  Issuer

  CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

  Not Before

  31-12-2015 00:00

  Not After

  09-07-2019 18:40

  Subject

  CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  b1:bb:ef:3a:ba:79:ab:2e:ae:5b:80:15:f2:6b:34:f8

  Certificate

  Issuer

  CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  13-05-2016 00:00

  Not After

  13-05-2017 23:59

  Subject

  CN=DIDZHITAL ART\, OOO,O=DIDZHITAL ART\, OOO,POSTALCODE=105043,STREET=d.23 Pr Zavodskoi,L=Moscow,ST=Moscow,C=RU

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af

  Certificate

  Issuer

  CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  09-05-2013 00:00

  Not After

  08-05-2028 23:59

  Subject

  CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  2c:26:b2:fd:5f:11:0e:9a:21:8a:65:b6:67:13:13:22:cb:52:4c:91

  Signer

  Actual PE Digest

  2c:26:b2:fd:5f:11:0e:9a:21:8a:65:b6:67:13:13:22:cb:52:4c:91

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvbvm60

  _CIcos

  _adj_fptan

  __vbaVarMove

  __vbaFreeVar

  __vbaStrVarMove

  __vbaFreeVarList

  _adj_fdiv_m64

  _adj_fprem1

  ord628

  __vbaSetSystemError

  __vbaHresultCheckObj

  __vbaLenBstrB

  _adj_fdiv_m32

  ord666

  _adj_fdiv_m16i

  __vbaObjSetAddref

  _adj_fdivr_m16i

  _CIsin

  ord632

  __vbaChkstk

  EVENT_SINK_AddRef

  __vbaI2I4

  DllFunctionCall

  _adj_fpatan

  EVENT_SINK_Release

  _CIsqrt

  EVENT_SINK_QueryInterface

  __vbaExceptHandler

  _adj_fprem

  _adj_fdivr_m64

  __vbaFPException

  _CIlog

  __vbaNew2

  _adj_fdiv_m32i

  _adj_fdivr_m32i

  _adj_fdivr_m32

  _adj_fdiv_r

  ord100

  __vbaVarDup

  _CIatan

  __vbaStrMove

  _allmul

  _CItan

  _CIexp

  __vbaFreeObj

  __vbaFreeStr

  Sections

  .text

  Size: 360KB - Virtual size: 358KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ