825209798cf7942087479344a1b00ee44e32ab5bde413e126d7fc5f1f1baa8d7

Sharing

Copy URL Twitter E-mail

General

Target

825209798cf7942087479344a1b00ee44e32ab5bde413e126d7fc5f1f1baa8d7
Size

483KB
MD5

fd24d59501a3617b58c97c91ab17d307
SHA1

bac7056ce7a87dc1cb11d4e872dabd1ffe257ce1
SHA256

825209798cf7942087479344a1b00ee44e32ab5bde413e126d7fc5f1f1baa8d7
SHA512

d62db795bdafb38c04e38ea55d7058de3a69280700d7ddfa1b5f2fadc7c13b159224af466fb9ebfc7fbc235cbb3a8768e142808d5f9161f6d7ba4d9bca55d13f
SSDEEP

6144:Mwrueeb3xBG3Gp1ZbeXswTOUvnsw0pRGu7rFSRfo6we+qCndfCsxfmW:MPeu3oXsOtnswKf4N52JpfmW

Score

N/A

Malware Config

Signatures

Files

825209798cf7942087479344a1b00ee44e32ab5bde413e126d7fc5f1f1baa8d7
.exe windows x86

d4ff4e9520d2b9d618be12fecec0c0ac

Code Sign

55:21:db:26:ce:0c:b3:e4
Certificate

Issuer

CN=TrustAsia.com Code Signing CA,O=Dotsoft Technologies\, Inc.,C=CN

Not Before

01/03/2011, 01:07

Not After

01/03/2014, 01:07

Subject

CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04
Certificate

Issuer

CN=TrustAsia.com Root CA,O=Dotsoft Technologies\, Inc.,C=CN

Not Before

15/02/2010, 16:37

Not After

15/02/2020, 16:37

Subject

CN=TrustAsia.com Code Signing CA,O=Dotsoft Technologies\, Inc.,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6a:51:65:1e:ca:e1:1e:2a:89:bf:34:50:de:70:69:8c:c0:d8:06:78
Signer

Actual PE Digest

6a:51:65:1e:ca:e1:1e:2a:89:bf:34:50:de:70:69:8c:c0:d8:06:78

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

28/11/2022, 11:52
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LoadResource
SizeofResource
FindResourceA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
DeleteFileA
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
LockResource
lstrcpyA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA

lz32

LZCopy
LZOpenFileA
LZClose

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 477KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4ff4e9520d2b9d618be12fecec0c0ac

Code Sign

55:21:db:26:ce:0c:b3:e4Certificate

Extended Key Usages

Key Usages

04Certificate

Extended Key Usages

Key Usages

6a:51:65:1e:ca:e1:1e:2a:89:bf:34:50:de:70:69:8c:c0:d8:06:78Signer

Signature Validations

Verification

28/11/2022, 11:52 Valid: false

Headers

File Characteristics

Imports

kernel32

lz32

user32

Sections

.text Size: 2KB - Virtual size: 2KB

.rsrc Size: 477KB - Virtual size: 477KB

55:21:db:26:ce:0c:b3:e4
Certificate

04
Certificate

6a:51:65:1e:ca:e1:1e:2a:89:bf:34:50:de:70:69:8c:c0:d8:06:78
Signer

28/11/2022, 11:52
Valid: false

.text
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 477KB - Virtual size: 477KB