d783d81b80834344aba2e1a43f233fa036ada2d626c3a467a5b540b96a64caac

Sharing

Copy URL Twitter E-mail

General

Target

d783d81b80834344aba2e1a43f233fa036ada2d626c3a467a5b540b96a64caac
Size

2.3MB
MD5

c4ca425fd57350bc73a750d2cef23824
SHA1

591f6f1c4b35c8cfb56438d60688ffd013092aec
SHA256

d783d81b80834344aba2e1a43f233fa036ada2d626c3a467a5b540b96a64caac
SHA512

d67d3b89c0c4e9f451565eb24490e4ae8e29e90f78c9744a7d8e7acfcf4ea4892f23c47bb08b41e33fc41c4c5320e2fcaa82b3fbcee7c0e17d15329031a2e9fa
SSDEEP

49152:nJRrMjptEPtbOQYtzFtG5KoydDgGiKci0BmR+OP15Egzd/IPpfP:n3Mj4PPQqpyVtJj2x

Score

N/A

Malware Config

Signatures

Files

d783d81b80834344aba2e1a43f233fa036ada2d626c3a467a5b540b96a64caac
.exe windows x86

a6504075b482d5741050a8e4c8f47fca

Code Sign

55:21:db:26:ce:0c:b3:e4
Certificate

Issuer

CN=TrustAsia.com Code Signing CA,O=Dotsoft Technologies\, Inc.,C=CN

Not Before

01/03/2011, 01:07

Not After

01/03/2014, 01:07

Subject

CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04
Certificate

Issuer

CN=TrustAsia.com Root CA,O=Dotsoft Technologies\, Inc.,C=CN

Not Before

15/02/2010, 16:37

Not After

15/02/2020, 16:37

Subject

CN=TrustAsia.com Code Signing CA,O=Dotsoft Technologies\, Inc.,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

20:90:0b:7d:28:1d:38:07:21:07:34:1d:47:c1:59:84:cd:c0:38:6c
Signer

Actual PE Digest

20:90:0b:7d:28:1d:38:07:21:07:34:1d:47:c1:59:84:cd:c0:38:6c

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

rasapi32

RasHangUpA

winmm

midiStreamRestart

ws2_32

send

kernel32

OpenProcess

user32

SetWindowContextHelpId

gdi32

RoundRect

winspool.drv

ClosePrinter

comdlg32

ChooseColorA

advapi32

RegCloseKey

shell32

SHGetSpecialFolderPathA

ole32

CoGetClassObject

oleaut32

SafeArrayAccessData

comctl32

ImageList_LoadImageA

oledlg

ord8

wininet

InternetOpenA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 1.0MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a6504075b482d5741050a8e4c8f47fca

Code Sign

55:21:db:26:ce:0c:b3:e4Certificate

Extended Key Usages

Key Usages

04Certificate

Extended Key Usages

Key Usages

20:90:0b:7d:28:1d:38:07:21:07:34:1d:47:c1:59:84:cd:c0:38:6cSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

msvfw32

avifil32

rasapi32

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

wininet

msvcrt

iphlpapi

psapi

Sections

.text Size: 1.0MB - Virtual size: 2.1MB

.sedata Size: 1.3MB - Virtual size: 1.3MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 12KB - Virtual size: 12KB

.sedata Size: 4KB - Virtual size: 4KB

55:21:db:26:ce:0c:b3:e4
Certificate

04
Certificate

20:90:0b:7d:28:1d:38:07:21:07:34:1d:47:c1:59:84:cd:c0:38:6c
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 1.0MB - Virtual size: 2.1MB

.sedata
Size: 1.3MB - Virtual size: 1.3MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 12KB - Virtual size: 12KB

.sedata
Size: 4KB - Virtual size: 4KB