Deep Malware Analysis of a04bc829d2fa5a4a63d613fa1eb88d34 | md5: a04bc829d2fa5a4a63d613fa1eb88d34 | Office Document | SVG | CAB:COMPRESSION:MSZIP | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	a04bc829d2fa5a4a63d613fa1eb88d34
Sha1	478d93419be73a69b01857e1c21e8b1b88341ca9
Sha256	32f886142de76f09b1e7229a79e66eb46889251ebf871e4df3b6de7fd5cef749
Sha384	ba6c5bd0a1b2ebc8582d8cd7fc574343fe373f75aad8e369e4f79af17d87a4ea507063d839aeb7f0c3465738fb8dc922
Sha512	52d0fcf7fea6c5a9edb46a5d09c23b4d1cf1bca094a35c9628023208adc53c26662b7083b85b9c2f1641d3b067a915a7d9f9af32d80300de11e993a8fa5a6908
SSDeep	49152:Ni6HYTZKumZr7AcI1K+JekDXVqIoJTEQCw6Sa+2PmwxstXIxEBZMN:tYFK/AcIX1DX0zrCw4TPSIrN
TLSH	1ED501217386C637C9AE05703929879B157DFCA30B7180DBA3D8292E9DB41C16739FA7

File Structure

Artefacts

Name	Value
URLs in VB Code - #1	http://ns.adobe.com/xap/1.0/
URLs in VB Code - #2	http://www.w3.org/1999/02/22-rdf-syntax-ns#
URLs in VB Code - #3	http://ns.adobe.com/xap/1.0/mm/
URLs in VB Code - #4	http://ns.adobe.com/xap/1.0/sType/ResourceRef#
URLs in VB Code - #5	http://www.w3.org/2000/svg
URLs in VB Code - #6	http://www.w3.org/1999/xlink
URLs in VB Code - #7	http://t2.symcb.com0
URLs in VB Code - #8	http://t1.symcb.com/ThawtePCA.crl0
URLs in VB Code - #9	http://tl.symcb.com/tl.crl0
URLs in VB Code - #10	https://www.thawte.com/cps0/
URLs in VB Code - #11	https://www.thawte.com/repository0W
URLs in VB Code - #12	http://tl.symcb.com/tl.crt0
URLs in VB Code - #13	https://www.advancedinstaller.com
URLs in VB Code - #14	http://www.digicert.com/CPS0
URLs in VB Code - #15	http://crl3.digicert.com/sha2-assured-ts.crl02
URLs in VB Code - #16	http://crl4.digicert.com/sha2-assured-ts.crl0
URLs in VB Code - #17	http://ocsp.digicert.com0O
URLs in VB Code - #18	http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
URLs in VB Code - #19	http://ocsp.digicert.com0C
URLs in VB Code - #20	http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
URLs in VB Code - #21	http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
URLs in VB Code - #22	http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
URLs in VB Code - #23	https://www.digicert.com/CPS0
URLs in VB Code - #24	https://zyvxdw.com/hea.phpAI_DOWNGRADE4010AI_DpiContentScaleDpiContentScaleAI_EnableDebugLogEnableDebugLogUpdateI3
URLs in VB Code - #25	http://cert.ssl.com/SSLcom-SubCA-EV-CodeSigning-RSA-4096-R3.cer0
URLs in VB Code - #26	http://ocsps.ssl.com0P
URLs in VB Code - #27	https://www.ssl.com/repository0
URLs in VB Code - #28	http://crls.ssl.com/SSLcom-SubCA-EV-CodeSigning-RSA-4096-R3.crl0
URLs in VB Code - #29	http://www.ssl.com/repository/SSLcom-RootCA-EV-RSA-4096-R2.crt0
URLs in VB Code - #30	http://ocsps.ssl.com0
URLs in VB Code - #31	http://crls.ssl.com/SSLcom-RootCA-EV-RSA-4096-R2.crl0
URLs in VB Code - #32	http://cert.ssl.com/SSL.com-timeStamping-I-RSA-R1.cer0Q
URLs in VB Code - #33	http://crls.ssl.com/SSL.com-timeStamping-I-RSA-R1.crl0
URLs in VB Code - #34	http://www.ssl.com/repository/SSLcomRootCertificationAuthorityRSA.crt0
URLs in VB Code - #35	http://crls.ssl.com/ssl.com-rsa-RootCA.crl0
URLs in VB Code - #1	http://t2.symcb.com0
URLs in VB Code - #2	http://t1.symcb.com/ThawtePCA.crl0
URLs in VB Code - #3	http://tl.symcb.com/tl.crl0
URLs in VB Code - #4	https://www.thawte.com/cps0/
URLs in VB Code - #5	https://www.thawte.com/repository0W
URLs in VB Code - #6	http://tl.symcb.com/tl.crt0
URLs in VB Code - #7	https://www.advancedinstaller.com
URLs in VB Code - #8	http://www.digicert.com/CPS0
URLs in VB Code - #9	http://crl3.digicert.com/sha2-assured-ts.crl02
URLs in VB Code - #10	http://crl4.digicert.com/sha2-assured-ts.crl0
URLs in VB Code - #11	http://ocsp.digicert.com0O
URLs in VB Code - #12	http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
URLs in VB Code - #13	http://ocsp.digicert.com0C
URLs in VB Code - #14	http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
URLs in VB Code - #15	http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
URLs in VB Code - #16	http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
URLs in VB Code - #17	https://www.digicert.com/CPS0

a04bc829d2fa5a4a63d613fa1eb88d34 (2.82 MB)