General

Malware Config

Signatures

Files

• 7f868ec88b44bdbba15d1b37cc7a2dc0aa7ba396d12b55b0faaa24220066dde6

  .exe windows x86

  
  

  Code Sign

  55:21:db:26:ce:0c:b3:e4

  Certificate

  Issuer

  CN=TrustAsia.com Code Signing CA,O=Dotsoft Technologies\, Inc.,C=CN

  Not Before

  01-03-2011 01:07

  Not After

  01-03-2014 01:07

  Subject

  CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  65:a7:e7:0f:27:f1:c0:59:2f:0f:77:58:2a:8d:79:9d:e8:21:bd:42

  Signer

  Actual PE Digest

  65:a7:e7:0f:27:f1:c0:59:2f:0f:77:58:2a:8d:79:9d:e8:21:bd:42

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

  01-01-0001 00:00

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Sections

  .nsp0

  Size: - Virtual size: 208KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .nsp1

  Size: 87KB - Virtual size: 92KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .nsp2

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE