922b39e064756f0da29b5838bcb52f48f2ddb782ecdfa58453a504ae02e4a650

Sharing

Copy URL Twitter E-mail

General

Target

922b39e064756f0da29b5838bcb52f48f2ddb782ecdfa58453a504ae02e4a650
Size

379KB
MD5

d4d644b25525faa74346c107f5672649
SHA1

65c8bfad5f97eaf84151973d0d96744ec2a94376
SHA256

922b39e064756f0da29b5838bcb52f48f2ddb782ecdfa58453a504ae02e4a650
SHA512

6dd6521eb5be035415e0270eb1f58882018473e3b87d3fc760b747f53cb03120a324cb8c0e6d1437154cb5b30217a85d878e70693717d9e4b20f6629432b121c
SSDEEP

6144:Sx+W/0v0UgG086DjHCscwd2ZU1H9S4idsyedQkolIRIrmNF0vxs7/OpBA/lADdkG:sec5XDjHCEd2W9vCedQHl9vvxsjOprdP

Score

N/A

Malware Config

Signatures

Files

922b39e064756f0da29b5838bcb52f48f2ddb782ecdfa58453a504ae02e4a650
.exe windows x86

b59445f632d9a620520d80b5a54a3f2d

Code Sign

36:34:e4:91:57:27:35:6d:b9:e7:6d:e5:e8:ed:09:87
Certificate

Issuer

CN=Root Agency

Not Before

04/11/2011, 13:45

Not After

10/12/2022, 22:00

Subject

CN=Chunghwa Telecom

Extended Key Usages

ExtKeyUsageCodeSigning

42:13:bd:89:fd:bc:36:1f:ee:8c:01:16:e7:1a:bf:d2:59:27:10:fa
Signer

Actual PE Digest

42:13:bd:89:fd:bc:36:1f:ee:8c:01:16:e7:1a:bf:d2:59:27:10:fa

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Chunghwa Telecom

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glAccum
glRasterPos2fv
glLightModelfv
glColor4s
glNormal3i
glTexCoord2s
glEvalPoint2
glDrawPixels
glMapGrid2f
glCallLists
glCopyTexSubImage2D

user32

AdjustWindowRectEx
CascadeWindows
GetDlgCtrlID
GetDlgItem
ShowWindowAsync
SetWindowPlacement
ChildWindowFromPointEx
GetWindow
OpenIcon

advapi32

RegEnumKeyExA
RegReplaceKeyA
RegQueryValueA
RegDeleteValueA
RegQueryValueExA
RegSetValueA
RegSetValueExA

msvcrt

_controlfp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

kernel32

VirtualAllocEx
SetThreadLocale
LocalFree
HeapSize
GetProfileStringA
HeapDestroy
VirtualFree
HeapValidate
LocalReAlloc
GetCPInfoExA
WriteProfileSectionA
VirtualAlloc
ExitProcess
GetModuleHandleA
GetProcAddress
GetStartupInfoA
IsBadReadPtr

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 263KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b59445f632d9a620520d80b5a54a3f2d

Code Sign

36:34:e4:91:57:27:35:6d:b9:e7:6d:e5:e8:ed:09:87Certificate

Extended Key Usages

42:13:bd:89:fd:bc:36:1f:ee:8c:01:16:e7:1a:bf:d2:59:27:10:faSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

opengl32

user32

advapi32

msvcrt

kernel32

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 97KB - Virtual size: 96KB

.data Size: 263KB - Virtual size: 341KB

.tls Size: 512B - Virtual size: 4B

.rsrc Size: 5KB - Virtual size: 5KB

36:34:e4:91:57:27:35:6d:b9:e7:6d:e5:e8:ed:09:87
Certificate

42:13:bd:89:fd:bc:36:1f:ee:8c:01:16:e7:1a:bf:d2:59:27:10:fa
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 97KB - Virtual size: 96KB

.data
Size: 263KB - Virtual size: 341KB

.tls
Size: 512B - Virtual size: 4B

.rsrc
Size: 5KB - Virtual size: 5KB