General

Malware Config

Signatures

Files

• ChromiumSetup.exe

  .exe windows x86

  1b376f54899f3d8cea8bca73adb90799

  
  

  Code Sign

  71:dd:75:1a:09:a6:5c:ec:32:97:56:d5:c0:ed:d6:2f

  Certificate

  Issuer

  CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  14-05-2021 00:00

  Not After

  14-05-2022 23:59

  Subject

  SERIALNUMBER=91350203MA346RCB9G,CN=厦门腾瑞科技有限公司,OU=it部门,O=厦门腾瑞科技有限公司,L=厦门市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

  Certificate

  Issuer

  CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  03-12-2014 00:00

  Not After

  02-12-2029 23:59

  Subject

  CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  29-03-2022 00:00

  Not After

  14-03-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  71:dd:75:1a:09:a6:5c:ec:32:97:56:d5:c0:ed:d6:2f

  Certificate

  Issuer

  CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  14-05-2021 00:00

  Not After

  14-05-2022 23:59

  Subject

  SERIALNUMBER=91350203MA346RCB9G,CN=厦门腾瑞科技有限公司,OU=it部门,O=厦门腾瑞科技有限公司,L=厦门市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

  Certificate

  Issuer

  CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  03-12-2014 00:00

  Not After

  02-12-2029 23:59

  Subject

  CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  29-03-2022 00:00

  Not After

  14-03-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  7d:a7:4b:ac:f1:d1:48:02:11:26:72:c2:7f:50:c8:94:54:63:6d:27:79:4a:05:fb:81:ac:6f:bb:37:dd:76:e7

  Signer

  Actual PE Digest

  7d:a7:4b:ac:f1:d1:48:02:11:26:72:c2:7f:50:c8:94:54:63:6d:27:79:4a:05:fb:81:ac:6f:bb:37:dd:76:e7

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  SERIALNUMBER=91350203MA346RCB9G,CN=厦门腾瑞科技有限公司,OU=it部门,O=厦门腾瑞科技有限公司,L=厦门市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

  22-04-2022 11:26

  Valid: true

  Chain 1

  SERIALNUMBER=91350203MA346RCB9G,CN=厦门腾瑞科技有限公司,OU=it部门,O=厦门腾瑞科技有限公司,L=厦门市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

  CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  cb:90:a0:8b:99:85:e6:74:e2:86:1a:ad:b5:b3:81:40:45:85:70:68

  Signer

  Actual PE Digest

  cb:90:a0:8b:99:85:e6:74:e2:86:1a:ad:b5:b3:81:40:45:85:70:68

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  SERIALNUMBER=91350203MA346RCB9G,CN=厦门腾瑞科技有限公司,OU=it部门,O=厦门腾瑞科技有限公司,L=厦门市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

  22-04-2022 11:26

  Valid: true

  Chain 1

  SERIALNUMBER=91350203MA346RCB9G,CN=厦门腾瑞科技有限公司,OU=it部门,O=厦门腾瑞科技有限公司,L=厦门市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

  CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  gdiplus

  GdipAddPathArcI

  GdipAddPathEllipseI

  GdipAddPathRectangleI

  GdipAddPathCurveI

  GdipAddPathBezierI

  GdipAddPathLine2I

  GdipAddPathLineI

  GdipClosePathFigure

  GdipStartPathFigure

  GdipGetPathFillMode

  GdipSetPathFillMode

  GdipResetPath

  GdipClonePath

  GdipCreatePath

  GdipCreateTexture

  GdipGetPathWorldBoundsI

  GdipIsVisiblePathPointI

  GdipIsOutlineVisiblePathPointI

  GdipTransformPath

  GdipAddPathPieI

  GdipFillRectangle

  GdipDrawLineI

  GdipDrawBezierI

  GdipDrawRectangleI

  GdiplusStartup

  GdipDrawPath

  GdipCreateFontFromDC

  GdipCreateFontFromLogfontA

  GdipDeleteFont

  GdipCloneStringFormat

  GdipCreateBitmapFromHBITMAP

  GdipCreateSolidFill

  GdipGetPenDashStyle

  GdipDeleteStringFormat

  GdipSetStringFormatTrimming

  GdipSetStringFormatFlags

  GdipSetStringFormatAlign

  GdipSetStringFormatLineAlign

  GdipDrawString

  GdipDeletePath

  GdipAddPathPolygonI

  GdipDrawEllipseI

  GdipFillEllipseI

  GdipFillPath

  GdipSetPenDashStyle

  GdipGetPenLineJoin

  GdipSetPenLineJoin

  GdipGetPenDashCap197819

  GdipGetPenEndCap

  GdipGetPenStartCap

  GdipSetPenDashCap197819

  GdipSetPenEndCap

  GdipSetPenStartCap

  GdipSetPenColor

  GdipGetPenWidth

  GdipSetPenWidth

  GdipClonePen

  GdipLoadImageFromFile

  GdipMeasureString

  GdipImageRotateFlip

  GdipDrawImageRect

  GdipSetWorldTransform

  GdipRotateMatrix

  GdipTranslateMatrix

  GdipCreatePen2

  GdipSetLineBlend

  GdipCloneBrush

  GdipDeleteBrush

  GdipCreateLineBrushFromRect

  GdipDrawArc

  GdipDeletePen

  GdipCreatePen1

  GdipSetSmoothingMode

  GdipDeleteGraphics

  GdipCreateFromHDC

  GdipStringFormatGetGenericTypographic

  GdipScaleMatrix

  GdipCreateBitmapFromFile

  GdipDeleteMatrix

  GdipCreateMatrix

  GdipGetImagePalette

  GdipGetImagePaletteSize

  GdipGetImagePixelFormat

  GdipGetImageHeight

  GdipGetImageWidth

  GdipCreateHBITMAPFromBitmap

  GdipImageSelectActiveFrame

  GdipGetPropertyItem

  GdipGetPropertyItemSize

  GdipImageGetFrameCount

  GdipImageGetFrameDimensionsList

  GdipImageGetFrameDimensionsCount

  GdipCreateBitmapFromStream

  GdipDisposeImage

  GdipCloneImage

  GdipAlloc

  GdipFree

  GdiplusShutdown

  shlwapi

  PathAppendW

  PathFileExistsW

  PathIsRelativeW

  winmm

  timeKillEvent

  timeSetEvent

  timeGetTime

  comctl32

  ord17

  _TrackMouseEvent

  imm32

  ImmGetContext

  ImmReleaseContext

  ImmSetCompositionWindow

  msimg32

  AlphaBlend

  kernel32

  CreateThread

  LoadLibraryExW

  SetLastError

  RtlUnwind

  InitializeSListHead

  GetStartupInfoW

  ExitThread

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  WaitForSingleObjectEx

  IsDebuggerPresent

  GetCPInfo

  GetStringTypeW

  EncodePointer

  FreeLibraryAndExitThread

  GetStdHandle

  GetFileType

  LCMapStringW

  FlushFileBuffers

  GetConsoleCP

  GetConsoleMode

  GetFileSizeEx

  SetFilePointerEx

  ReadConsoleW

  FindFirstFileExW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCommandLineA

  GetCommandLineW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetStdHandle

  SetEndOfFile

  WriteConsoleW

  VirtualQuery

  IsProcessorFeaturePresent

  Process32NextW

  SizeofResource

  HeapFree

  EnterCriticalSection

  WriteFile

  LeaveCriticalSection

  InitializeCriticalSectionEx

  CreateFileW

  FreeResource

  HeapSize

  MultiByteToWideChar

  GetLastError

  OutputDebugStringW

  LockResource

  HeapReAlloc

  CloseHandle

  RaiseException

  LoadResource

  FindResourceW

  HeapAlloc

  GetLocalTime

  DecodePointer

  DeleteCriticalSection

  ExitProcess

  GetProcessHeap

  GetModuleHandleW

  WideCharToMultiByte

  SetThreadPriority

  WaitForSingleObject

  GetCurrentThreadId

  Sleep

  TerminateThread

  TlsSetValue

  TlsAlloc

  TlsGetValue

  TlsFree

  CreateEventW

  SetEvent

  ResetEvent

  InitializeCriticalSectionAndSpinCount

  GetQueuedCompletionStatus

  PostQueuedCompletionStatus

  CreateIoCompletionPort

  LocalFileTimeToFileTime

  QueryPerformanceFrequency

  SystemTimeToFileTime

  GetSystemTimeAsFileTime

  QueryPerformanceCounter

  VerifyVersionInfoW

  VerSetConditionMask

  GetTickCount

  GlobalFree

  GetCurrentDirectoryW

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GetProcAddress

  GetModuleHandleA

  GetCurrentProcessId

  MulDiv

  GlobalSize

  GetFileAttributesW

  LoadLibraryW

  SetFilePointer

  ReadFile

  CreateDirectoryW

  GetFileSize

  GetEnvironmentVariableW

  FindClose

  FindFirstFileW

  FindNextFileW

  GetDriveTypeW

  GetCurrentProcess

  TerminateProcess

  GetModuleFileNameW

  GetModuleHandleExW

  LocalFree

  CreateToolhelp32Snapshot

  Process32FirstW

  FreeLibrary

  user32

  CreateWindowExW

  DestroyWindow

  PostMessageW

  DefWindowProcW

  ReleaseDC

  LoadCursorW

  RegisterClassW

  GetClassInfoExW

  SetWindowLongW

  IsWindow

  GetWindowLongW

  GetWindow

  EnableWindow

  SetFocus

  ShowWindow

  GetWindowRect

  GetMonitorInfoW

  MonitorFromWindow

  IsIconic

  SetWindowPos

  GetSystemMetrics

  SendMessageW

  CallWindowProcW

  SetPropW

  GetPropW

  GetDC

  SetWindowTextW

  InvalidateRect

  ScreenToClient

  GetKeyState

  GetCursorPos

  GetFocus

  SetCapture

  ReleaseCapture

  BeginPaint

  EndPaint

  MoveWindow

  GetUpdateRect

  GetClientRect

  WaitMessage

  IntersectRect

  UpdateLayeredWindow

  PtInRect

  IsZoomed

  MonitorFromPoint

  OffsetRect

  SetWindowRgn

  IsWindowVisible

  SetForegroundWindow

  UnionRect

  SetCursor

  CharNextW

  ClientToScreen

  GetSysColor

  GetAsyncKeyState

  OpenClipboard

  IsClipboardFormatAvailable

  GetClipboardData

  CloseClipboard

  EmptyClipboard

  SetClipboardData

  FindWindowW

  GetDesktopWindow

  MapWindowPoints

  GetParent

  UnregisterClassW

  RegisterClassExW

  MessageBoxW

  PostQuitMessage

  KillTimer

  TranslateMessage

  GetQueueStatus

  CallMsgFilterW

  MsgWaitForMultipleObjectsEx

  PeekMessageW

  DispatchMessageW

  SetTimer

  IsRectEmpty

  gdi32

  SetWindowOrgEx

  SetStretchBltMode

  GetObjectA

  CreateRectRgnIndirect

  ExtSelectClipRgn

  StretchBlt

  GetWindowOrgEx

  GetDeviceCaps

  CreateRoundRectRgn

  BitBlt

  SelectObject

  DeleteObject

  CreateCompatibleDC

  CreateFontIndirectW

  CreateDIBSection

  SaveDC

  GetStockObject

  GetObjectW

  RestoreDC

  DeleteDC

  advapi32

  RegSetValueExW

  RegCreateKeyExW

  RegCloseKey

  shell32

  SHGetSpecialFolderPathW

  ShellExecuteW

  ole32

  CoCreateInstance

  CreateStreamOnHGlobal

  oleaut32

  VariantClear

  Sections

  .text

  Size: 440KB - Virtual size: 439KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 107KB - Virtual size: 106KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 13KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 52.8MB - Virtual size: 52.8MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 25KB - Virtual size: 24KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ