Suspicious
Suspect

a92795d7d100d9342ed2638e365807dd

PE Executable
|
MD5: a92795d7d100d9342ed2638e365807dd
|
Size: 16.17 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
a92795d7d100d9342ed2638e365807dd
Sha1
27e63e0e7827e4979d1754ded4157e50f86aac93
Sha256
fc07fd190d3fd931b826c344c3be9fd36c68c11561e2b4c78fc0c306de4ac976
Sha384
544e94eff2a14aef3102c3d4cd427bd447e6ecade287124d3ad099a6f51e39e660fe3d043067f33dbf8f3db386569629
Sha512
e2453efcbc93581a6119b50bf4222808f3a2eb6f1efbfdaeb3002e4805674dcb44c01338d8b5d2d0c43fbc62ff71c53288eee107a596404d80ae56f36fc9ace7
SSDeep
196608:czd++FJS1mwEBNCe4Nwqa4kSLJJycEUalvV/J5Tq/Kee6kvfWPFppaJr7fo3:cNRwEBNCKqa43Lj2V9/JY/Kee6ftMQ
TLSH
69F63361676550F2D1F7873ACDF6AF0DEB607066A32E3EEB120A54D47E933486C3A604

PeID

Microsoft Visual C++ v6.0 DLL
File Structure
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
RT_RCDATA
ID:0002
ID:1024
RT_GROUP_CURSOR4
ID:0064
ID:1033
ID:0065
ID:1033
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Artefacts
Name
Value
PDB Path

t$di

URLs in VB Code - #1

http://ocsp.thawte.com0

URLs in VB Code - #2

http://crl.thawte.com/ThawteTimestampingCA.crl0

URLs in VB Code - #3

http://ts-ocsp.ws.symantec.com07

URLs in VB Code - #4

http://ts-aia.ws.symantec.com/tss-ca-g2.cer0

URLs in VB Code - #5

http://ts-crl.ws.symantec.com/tss-ca-g2.crl0

URLs in VB Code - #6

https://www.verisign.com/rpa

URLs in VB Code - #7

http://csc3-2010-crl.verisign.com/CSC3-2010.crl0D

URLs in VB Code - #8

https://www.verisign.com/rpa0

URLs in VB Code - #9

http://ocsp.verisign.com0

URLs in VB Code - #10

http://csc3-2010-aia.verisign.com/CSC3-2010.cer0

URLs in VB Code - #11

http://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0

URLs in VB Code - #12

https://www.verisign.com/cps0

URLs in VB Code - #13

http://logo.verisign.com/vslogo.gif04

URLs in VB Code - #14

http://crl.verisign.com/pca3-g5.crl04

a92795d7d100d9342ed2638e365807dd (16.17 MB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
RT_RCDATA
ID:0002
ID:1024
RT_GROUP_CURSOR4
ID:0064
ID:1033
ID:0065
ID:1033
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Characteristics
No malware configuration were found at this point.
Artefacts
Name
Value Location
PDB Path

t$di

a92795d7d100d9342ed2638e365807dd

URLs in VB Code - #1

http://ocsp.thawte.com0

a92795d7d100d9342ed2638e365807dd

URLs in VB Code - #2

http://crl.thawte.com/ThawteTimestampingCA.crl0

a92795d7d100d9342ed2638e365807dd

URLs in VB Code - #3

http://ts-ocsp.ws.symantec.com07

a92795d7d100d9342ed2638e365807dd

URLs in VB Code - #4

http://ts-aia.ws.symantec.com/tss-ca-g2.cer0

a92795d7d100d9342ed2638e365807dd

URLs in VB Code - #5

http://ts-crl.ws.symantec.com/tss-ca-g2.crl0

a92795d7d100d9342ed2638e365807dd

URLs in VB Code - #6

https://www.verisign.com/rpa

a92795d7d100d9342ed2638e365807dd

URLs in VB Code - #7

http://csc3-2010-crl.verisign.com/CSC3-2010.crl0D

a92795d7d100d9342ed2638e365807dd

URLs in VB Code - #8

https://www.verisign.com/rpa0

a92795d7d100d9342ed2638e365807dd

URLs in VB Code - #9

http://ocsp.verisign.com0

a92795d7d100d9342ed2638e365807dd

URLs in VB Code - #10

http://csc3-2010-aia.verisign.com/CSC3-2010.cer0

a92795d7d100d9342ed2638e365807dd

URLs in VB Code - #11

http://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0

a92795d7d100d9342ed2638e365807dd

URLs in VB Code - #12

https://www.verisign.com/cps0

a92795d7d100d9342ed2638e365807dd

URLs in VB Code - #13

http://logo.verisign.com/vslogo.gif04

a92795d7d100d9342ed2638e365807dd

URLs in VB Code - #14

http://crl.verisign.com/pca3-g5.crl04

a92795d7d100d9342ed2638e365807dd

You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙