efc498b7f6def864d578812cfc847e4b2f6d07cf80396bfec29e6cbb179eeb92

Sharing

Copy URL

Twitter E-mail

General

Target

efc498b7f6def864d578812cfc847e4b2f6d07cf80396bfec29e6cbb179eeb92
Size

966KB
MD5

5e3af0cc4d5aee2efbc82223d5f557b0
SHA1

ea369b6a2bd633df00592c7ae6aab0e0d30f4f72
SHA256

efc498b7f6def864d578812cfc847e4b2f6d07cf80396bfec29e6cbb179eeb92
SHA512

ea1ee183dbb2e63d9e47e6ca1d1a634a5353a47ceae98d8ae62afc0c8baa64cd9de459e405ee53dd57bac939bd71f14d423f7cdb7b46b28fef456442bf5e555b
SSDEEP

12288:m6AIH6oH/FNFGFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbchFFc5cbc1czclz:m6A2JHfNR

Score

N/A

Malware Config

Signatures

Files

efc498b7f6def864d578812cfc847e4b2f6d07cf80396bfec29e6cbb179eeb92
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

19:ea:4d:af:08:95:70:86:14:08:e9:f0:5e:fd:9b:89
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

20-01-2020 00:00

Not After

15-03-2023 23:59

Subject

CN=Power Software Limited,O=Power Software Limited,L=NORTH POINT,ST=HONG KONG,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

19:ea:4d:af:08:95:70:86:14:08:e9:f0:5e:fd:9b:89
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

20-01-2020 00:00

Not After

15-03-2023 23:59

Subject

CN=Power Software Limited,O=Power Software Limited,L=NORTH POINT,ST=HONG KONG,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

52:f3:41:bc:f7:84:32:de:f7:cb:9c:91:26:55:4a:3b:ae:91:2b:9c:14:b5:da:a9:05:94:2d:57:e7:e5:5e:a4
Signer

Actual PE Digest

52:f3:41:bc:f7:84:32:de:f7:cb:9c:91:26:55:4a:3b:ae:91:2b:9c:14:b5:da:a9:05:94:2d:57:e7:e5:5e:a4

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Power Software Limited,O=Power Software Limited,L=NORTH POINT,ST=HONG KONG,C=HK

15-07-2022 01:09
Valid: false

67:4a:78:70:b6:48:89:3a:ad:bf:b9:28:dd:66:92:d7:40:e9:33:0a
Signer

Actual PE Digest

67:4a:78:70:b6:48:89:3a:ad:bf:b9:28:dd:66:92:d7:40:e9:33:0a

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Power Software Limited,O=Power Software Limited,L=NORTH POINT,ST=HONG KONG,C=HK

15-07-2022 01:09
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 940KB - Virtual size: 939KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

19:ea:4d:af:08:95:70:86:14:08:e9:f0:5e:fd:9b:89Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

19:ea:4d:af:08:95:70:86:14:08:e9:f0:5e:fd:9b:89Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

52:f3:41:bc:f7:84:32:de:f7:cb:9c:91:26:55:4a:3b:ae:91:2b:9c:14:b5:da:a9:05:94:2d:57:e7:e5:5e:a4Signer

Signature Validations

Verification

15-07-2022 01:09 Valid: false

67:4a:78:70:b6:48:89:3a:ad:bf:b9:28:dd:66:92:d7:40:e9:33:0aSigner

Signature Validations

Verification

15-07-2022 01:09 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 940KB - Virtual size: 939KB

.rsrc Size: 11KB - Virtual size: 11KB

.reloc Size: 512B - Virtual size: 12B

19:ea:4d:af:08:95:70:86:14:08:e9:f0:5e:fd:9b:89
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

19:ea:4d:af:08:95:70:86:14:08:e9:f0:5e:fd:9b:89
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

52:f3:41:bc:f7:84:32:de:f7:cb:9c:91:26:55:4a:3b:ae:91:2b:9c:14:b5:da:a9:05:94:2d:57:e7:e5:5e:a4
Signer

15-07-2022 01:09
Valid: false

67:4a:78:70:b6:48:89:3a:ad:bf:b9:28:dd:66:92:d7:40:e9:33:0a
Signer

15-07-2022 01:09
Valid: false

.text
Size: 940KB - Virtual size: 939KB

.rsrc
Size: 11KB - Virtual size: 11KB

.reloc
Size: 512B - Virtual size: 12B