2ec146447da0acf5d5ee069008568ddf6a2db0504b2759ed0fd955486941e11f

Sharing

Copy URL Twitter E-mail

General

Target

2ec146447da0acf5d5ee069008568ddf6a2db0504b2759ed0fd955486941e11f
Size

276KB
MD5

60889a250a0386e34e14aab329ae0f70
SHA1

593de820f2ebd4e0a7f09e808b961467fb6af553
SHA256

2ec146447da0acf5d5ee069008568ddf6a2db0504b2759ed0fd955486941e11f
SHA512

39ce6eff7559dd54a3e610fee05f28cebdf931fb2f3dbe45eb36a36b5a93ba57826933c2b2d8991fbcff0e7bb6cbddf20e2e3c754f866513ea7703101ef55575
SSDEEP

6144:+6b9u2PKAC711RKAC76PpedGAPYzZ9pI+ZT0q2gzCZChfXCCc:+KQ2yAC7UAC76BeIKYXa+ZTog5CCc

Score

N/A

Malware Config

Signatures

Files

2ec146447da0acf5d5ee069008568ddf6a2db0504b2759ed0fd955486941e11f
.exe windows x86

3dfda051cc3c00e36d0369d9fd380ae8

Code Sign

55:21:db:26:ce:0c:b3:e4
Certificate

Issuer

CN=TrustAsia.com Code Signing CA,O=Dotsoft Technologies\, Inc.,C=CN

Not Before

01/03/2011, 01:07

Not After

01/03/2014, 01:07

Subject

CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04
Certificate

Issuer

CN=TrustAsia.com Root CA,O=Dotsoft Technologies\, Inc.,C=CN

Not Before

15/02/2010, 16:37

Not After

15/02/2020, 16:37

Subject

CN=TrustAsia.com Code Signing CA,O=Dotsoft Technologies\, Inc.,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7d:44:c1:61:30:e1:0d:06:64:54:74:be:04:97:bd:00:d3:11:91:b1
Signer

Actual PE Digest

7d:44:c1:61:30:e1:0d:06:64:54:74:be:04:97:bd:00:d3:11:91:b1

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

06/10/2022, 18:39
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord823
ord825

msvcrt

_CIacos
printf
_CIpow
__dllonexit
atoi
wcstombs
wcslen
mbstowcs
_access
rand
calloc
strcat
vsprintf
exit
fopen
fwrite
fclose
strrchr
_except_handler3
free
strcmp
strcpy
malloc
memcpy
_beginthreadex
_strupr
strncat
wcscpy
__CxxFrameHandler
memmove
_ftol
_CxxThrowException
??1type_info@@UAE@XZ
memcmp
memset
strlen
_onexit

kernel32

RaiseException
Sleep
CloseHandle
InterlockedExchange
LocalAlloc
FreeLibrary
LocalFree
WideCharToMultiByte
GetExitCodeThread
TerminateThread
CreateThread
lstrlenA
MultiByteToWideChar
GetLastError
GetProcessHeap
HeapAlloc
HeapFree
InterlockedDecrement
SetEvent
WaitForSingleObject
LoadLibraryA
GetProcAddress
CreateEventA

msvcp60

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

iphlpapi

AddIPAddress
GetInterfaceInfo

Sections

.text
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3dfda051cc3c00e36d0369d9fd380ae8

Code Sign

55:21:db:26:ce:0c:b3:e4Certificate

Extended Key Usages

Key Usages

04Certificate

Extended Key Usages

Key Usages

7d:44:c1:61:30:e1:0d:06:64:54:74:be:04:97:bd:00:d3:11:91:b1Signer

Signature Validations

Verification

06/10/2022, 18:39 Valid: false

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

msvcp60

iphlpapi

Sections

.text Size: 265KB - Virtual size: 265KB

.rsrc Size: 1KB - Virtual size: 4KB

55:21:db:26:ce:0c:b3:e4
Certificate

04
Certificate

7d:44:c1:61:30:e1:0d:06:64:54:74:be:04:97:bd:00:d3:11:91:b1
Signer

06/10/2022, 18:39
Valid: false

.text
Size: 265KB - Virtual size: 265KB

.rsrc
Size: 1KB - Virtual size: 4KB