tmpg7ppnopp | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

tmpg7ppnopp
Size

3.2MB
MD5

6a04f501aeefa67f49287873ca57ca84
SHA1

213c407002adbf92d2a62a15c4d28b51f62e3e64
SHA256

9eee24de7c7be7ede485a66d1e21cfcd17abcd05a3b33b34892b58bb2298f4a9
SHA512

981ad9a3e270b10d39d6189cf4c20437ffd5994cec6437dfb035f88091b872abc644f7ecd01abe6a31ef1cd1aad88161e35ecd5ac15fbf8321e2f6acff6a43b8
SSDEEP

49152:moBa6TTJk3Uj2F8HXhnFvt4FF9j09MEE2AxRvZrNbptkorPVTNP3s/iuReN:Ro6vJvSurvSvYTAxZZHjsiu8N

Score

N/A

Malware Config

Signatures

Files

tmpg7ppnopp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:8e:c3:a1:e5:62:4b:18:1f:c7:3e:8a:04:0f:4a:a8
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19-06-2020 00:00

Not After

23-06-2023 12:00

Subject

SERIALNUMBER=913502033029307724,CN=Xiamen Baishengtong Software Technology Co.\,Ltd.,O=Xiamen Baishengtong Software Technology Co.\,Ltd.,L=厦门市,ST=福建省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e58ea6e997a8e5b882,1.3.6.1.4.1.311.60.2.1.2=#0c09e7a68fe5bbbae79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:9a:c5:19:8e:f8:f7:d2:07:df:04:ba:65:fd:50:1e
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19-06-2020 00:00

Not After

23-06-2023 12:00

Subject

SERIALNUMBER=913502033029307724,CN=Xiamen Baishengtong Software Technology Co.\,Ltd.,O=Xiamen Baishengtong Software Technology Co.\,Ltd.,L=厦门市,ST=福建省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e58ea6e997a8e5b882,1.3.6.1.4.1.311.60.2.1.2=#0c09e7a68fe5bbbae79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cf:7d:7c:5a:1d:2c:70:ce:9c:9b:ce:20:0c:48:2e:b4:68:b6:76:19:9b:29:33:73:64:eb:06:2a:cc:f5:e0:e1
Signer

Actual PE Digest

cf:7d:7c:5a:1d:2c:70:ce:9c:9b:ce:20:0c:48:2e:b4:68:b6:76:19:9b:29:33:73:64:eb:06:2a:cc:f5:e0:e1

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=913502033029307724,CN=Xiamen Baishengtong Software Technology Co.\,Ltd.,O=Xiamen Baishengtong Software Technology Co.\,Ltd.,L=厦门市,ST=福建省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e58ea6e997a8e5b882,1.3.6.1.4.1.311.60.2.1.2=#0c09e7a68fe5bbbae79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e

10-11-2021 01:33
Valid: true

Chain 1

SERIALNUMBER=913502033029307724,CN=Xiamen Baishengtong Software Technology Co.\,Ltd.,O=Xiamen Baishengtong Software Technology Co.\,Ltd.,L=厦门市,ST=福建省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e58ea6e997a8e5b882,1.3.6.1.4.1.311.60.2.1.2=#0c09e7a68fe5bbbae79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

18:c4:4d:3c:d5:eb:15:f6:23:c3:40:89:ad:e2:32:b3:41:83:e2:c4
Signer

Actual PE Digest

18:c4:4d:3c:d5:eb:15:f6:23:c3:40:89:ad:e2:32:b3:41:83:e2:c4

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=913502033029307724,CN=Xiamen Baishengtong Software Technology Co.\,Ltd.,O=Xiamen Baishengtong Software Technology Co.\,Ltd.,L=厦门市,ST=福建省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e58ea6e997a8e5b882,1.3.6.1.4.1.311.60.2.1.2=#0c09e7a68fe5bbbae79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e

10-11-2021 01:33
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

04:8e:c3:a1:e5:62:4b:18:1f:c7:3e:8a:04:0f:4a:a8Certificate

Extended Key Usages

Key Usages

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06Certificate

Extended Key Usages

Key Usages

0f:9a:c5:19:8e:f8:f7:d2:07:df:04:ba:65:fd:50:1eCertificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

cf:7d:7c:5a:1d:2c:70:ce:9c:9b:ce:20:0c:48:2e:b4:68:b6:76:19:9b:29:33:73:64:eb:06:2a:cc:f5:e0:e1Signer

Signature Validations

Verification

10-11-2021 01:33 Valid: true

Chain 1

18:c4:4d:3c:d5:eb:15:f6:23:c3:40:89:ad:e2:32:b3:41:83:e2:c4Signer

Signature Validations

Verification

10-11-2021 01:33 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rsrc Size: 158KB - Virtual size: 157KB

.reloc Size: 512B - Virtual size: 12B

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

04:8e:c3:a1:e5:62:4b:18:1f:c7:3e:8a:04:0f:4a:a8
Certificate

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

0f:9a:c5:19:8e:f8:f7:d2:07:df:04:ba:65:fd:50:1e
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

cf:7d:7c:5a:1d:2c:70:ce:9c:9b:ce:20:0c:48:2e:b4:68:b6:76:19:9b:29:33:73:64:eb:06:2a:cc:f5:e0:e1
Signer

10-11-2021 01:33
Valid: true

18:c4:4d:3c:d5:eb:15:f6:23:c3:40:89:ad:e2:32:b3:41:83:e2:c4
Signer

10-11-2021 01:33
Valid: false

.text
Size: 3.1MB - Virtual size: 3.1MB

.rsrc
Size: 158KB - Virtual size: 157KB

.reloc
Size: 512B - Virtual size: 12B