5f99b5709cdcdf03119edea8f659b5433a8d0a0e21982cf307be491ebe2e299d

Sharing

Copy URL Twitter E-mail

General

Target

5f99b5709cdcdf03119edea8f659b5433a8d0a0e21982cf307be491ebe2e299d
Size

27KB
MD5

46d7e0a3487c3b3487cd3940196cf170
SHA1

8dcc695f1e2b9fccb352c9b23bf91c4e4a5875c2
SHA256

5f99b5709cdcdf03119edea8f659b5433a8d0a0e21982cf307be491ebe2e299d
SHA512

0e41b47177f90d2f18f152fe20aff41783a1496e39a17e8586411d3478ad593b1742917b446e9ec5ba6103bef750a5530df2d451f78df4ab3a5e16409a5172dc
SSDEEP

768:dbyKssFFIR9NZwPT+To72ETyHV3VHHLdJJ:JhzIR9Sr2MyHVlnh

Score

N/A

Malware Config

Signatures

Files

5f99b5709cdcdf03119edea8f659b5433a8d0a0e21982cf307be491ebe2e299d
.exe windows x86

7a002c9ab906b878b5607c6c003e1508

Code Sign

55:21:db:26:ce:0c:b3:e4
Certificate

Issuer

CN=TrustAsia.com Code Signing CA,O=Dotsoft Technologies\, Inc.,C=CN

Not Before

01/03/2011, 01:07

Not After

01/03/2014, 01:07

Subject

CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04
Certificate

Issuer

CN=TrustAsia.com Root CA,O=Dotsoft Technologies\, Inc.,C=CN

Not Before

15/02/2010, 16:37

Not After

15/02/2020, 16:37

Subject

CN=TrustAsia.com Code Signing CA,O=Dotsoft Technologies\, Inc.,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

39:54:8c:db:ba:8b:a7:e9:bc:9c:60:d1:82:5d:05:de:04:e7:a0:2f
Signer

Actual PE Digest

39:54:8c:db:ba:8b:a7:e9:bc:9c:60:d1:82:5d:05:de:04:e7:a0:2f

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

28/11/2022, 11:52
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
GetProcAddress
LoadLibraryA
GetTempPathA
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableA
OpenMutexA
WaitForSingleObject
ExitProcess
CreateMutexA
lstrlenA
CopyFileA
GlobalMemoryStatusEx
GetComputerNameA
GetLocaleInfoW
GetModuleHandleA
ReleaseMutex
CloseHandle
GetLastError
GetModuleFileNameA
SetFileAttributesA
CreateThread
CreateProcessA
TerminateProcess
Sleep
ExitThread
GetSystemDirectoryA
lstrcatA
lstrcpyA
GetTickCount
GetShortPathNameA
GetStartupInfoA

user32

GetDesktopWindow
wsprintfA

advapi32

StartServiceA
RegOpenKeyA
RegSetValueExA
CloseServiceHandle
RegCloseKey
RegOpenKeyExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
OpenServiceA
DeleteService
RegQueryValueExA
CreateServiceA

shell32

ShellExecuteA

ws2_32

recv
WSASocketA
WSAStartup
send
setsockopt
htonl
inet_addr
gethostbyname
socket
htons
connect
closesocket
WSAIoctl
__WSAFDIsSet
select
sendto

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_except_handler3
strncmp
exit
strstr
strcspn
strncpy
rand
sprintf
malloc
atoi

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a002c9ab906b878b5607c6c003e1508

Code Sign

55:21:db:26:ce:0c:b3:e4Certificate

Extended Key Usages

Key Usages

04Certificate

Extended Key Usages

Key Usages

39:54:8c:db:ba:8b:a7:e9:bc:9c:60:d1:82:5d:05:de:04:e7:a0:2fSigner

Signature Validations

Verification

28/11/2022, 11:52 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

msvcrt

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 4KB

55:21:db:26:ce:0c:b3:e4
Certificate

04
Certificate

39:54:8c:db:ba:8b:a7:e9:bc:9c:60:d1:82:5d:05:de:04:e7:a0:2f
Signer

28/11/2022, 11:52
Valid: false

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 4KB