General

Malware Config

Signatures

Files

• 22b055e9d5da1c2a8dfb21777dab21d4093eb65aef5c959d56caacf34f656b03

  .exe windows x86

  
  

  Code Sign

  55:21:db:26:ce:0c:b3:e4

  Certificate

  Issuer

  CN=TrustAsia.com Code Signing CA,O=Dotsoft Technologies\, Inc.,C=CN

  Not Before

  01-03-2011 01:07

  Not After

  01-03-2014 01:07

  Subject

  CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04

  Certificate

  Issuer

  CN=TrustAsia.com Root CA,O=Dotsoft Technologies\, Inc.,C=CN

  Not Before

  15-02-2010 16:37

  Not After

  15-02-2020 16:37

  Subject

  CN=TrustAsia.com Code Signing CA,O=Dotsoft Technologies\, Inc.,C=CN

  Extended Key Usages

  ExtKeyUsageCodeSigning

  ExtKeyUsageTimeStamping

  ExtKeyUsageOCSPSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  97:dc:5f:93:f9:d2:b3:51:4d:c9:c9:07:7f:62:ef:21:c1:82:65:6b

  Signer

  Actual PE Digest

  97:dc:5f:93:f9:d2:b3:51:4d:c9:c9:07:7f:62:ef:21:c1:82:65:6b

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

  01-01-0001 00:00

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Sections

  .nsp0

  Size: - Virtual size: 208KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .nsp1

  Size: 87KB - Virtual size: 92KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .nsp2

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE