General

Malware Config

Signatures

Files

• 6c7a4c2eb323324b2591e838c5b3391c28828d8466a138533aff7bbf123fdbd1

  .exe windows x86

  
  

  Code Sign

  55:21:db:26:ce:0c:b3:e4

  Certificate

  Issuer

  CN=TrustAsia.com Code Signing CA,O=Dotsoft Technologies\, Inc.,C=CN

  Not Before

  01-03-2011 01:07

  Not After

  01-03-2014 01:07

  Subject

  CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04

  Certificate

  Issuer

  CN=TrustAsia.com Root CA,O=Dotsoft Technologies\, Inc.,C=CN

  Not Before

  15-02-2010 16:37

  Not After

  15-02-2020 16:37

  Subject

  CN=TrustAsia.com Code Signing CA,O=Dotsoft Technologies\, Inc.,C=CN

  Extended Key Usages

  ExtKeyUsageCodeSigning

  ExtKeyUsageTimeStamping

  ExtKeyUsageOCSPSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  a5:b2:c0:fc:d4:00:8b:fb:9b:4c:b1:d7:64:fe:cd:b6:36:6d:6e:c0

  Signer

  Actual PE Digest

  a5:b2:c0:fc:d4:00:8b:fb:9b:4c:b1:d7:64:fe:cd:b6:36:6d:6e:c0

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

  01-01-0001 00:00

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Sections

  .nsp0

  Size: - Virtual size: 208KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .nsp1

  Size: 87KB - Virtual size: 92KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .nsp2

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE