fa8cd3ac5708c6e454cd09806dc626fa3ea17faac27913386dc49bd354cba213

Sharing

Copy URL Twitter E-mail

General

Target

fa8cd3ac5708c6e454cd09806dc626fa3ea17faac27913386dc49bd354cba213
Size

217KB
MD5

6dac9e015c4766cdd7bba6dde452c0b0
SHA1

0b566dfee72ce7e32c1943d6c75f46515e209561
SHA256

fa8cd3ac5708c6e454cd09806dc626fa3ea17faac27913386dc49bd354cba213
SHA512

e3386c51072c775a5f1912c3d14ed2d24ea0ba371962c7576b4669a06359ba7298cb0ad369a07a685168b036650cfba83a729deff755b9d01f80c287b381a896
SSDEEP

3072:1Kmrx912kF3pTisYtla3qsj31M47ea/rKYoQOu+Fr3aSzjvjxkLaKM:gm/vpisyIzjlcrJTxkLan

Score

N/A

Malware Config

Signatures

Files

fa8cd3ac5708c6e454cd09806dc626fa3ea17faac27913386dc49bd354cba213
.dll windows x86

fd266e4ac057a0b68331212ed955f1bc

Code Sign

55:21:db:26:ce:0c:b3:e4
Certificate

Issuer

CN=TrustAsia.com Code Signing CA,O=Dotsoft Technologies\, Inc.,C=CN

Not Before

01/03/2011, 01:07

Not After

01/03/2014, 01:07

Subject

CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

ef:be:57:b4:68:3f:18:a6:d4:77:b6:f0:de:7f:04:2a:1d:aa:80:c8
Signer

Actual PE Digest

ef:be:57:b4:68:3f:18:a6:d4:77:b6:f0:de:7f:04:2a:1d:aa:80:c8

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
TerminateProcess
GetSystemInfo
GetModuleHandleA
IsDebuggerPresent
GetStartupInfoW
SetFileShortNameW
GetCurrentProcess
GetLastError

user32

DialogBoxParamW
DrawTextExW
GetSysColorBrush
LoadImageA
MessageBoxA
GetDlgItemTextW

gdi32

OffsetWindowOrgEx
SetMetaFileBitsEx
GetSystemPaletteUse

Exports

Exports

JarCu

Sections

csafe
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

capi
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

cbxstr
Size: 1024B - Virtual size: 534B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

csal
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

cset
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

capihk
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

cbase64
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

cbuff
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ccs
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

conline
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

cbase
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

cpe
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

chelp
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

cinst
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

cinstsvc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

cinstuac
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ckeylog
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

csi
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

css
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

csopipe
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

csosock
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

csovtcp
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

cwh
Size: 512B - Virtual size: 366B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

cvtcp
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dsafe
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dapi
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dapihk
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dbase64
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dbuff
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dbxstr
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dcs
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

donline
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dbase
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dsal
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dhelp
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dinst
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dinstsvc
Size: 512B - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dinstuac
Size: 1024B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dkeylog
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dpe
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dsi
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dss
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dset
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dsopipe
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dsosock
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dsovtcp
Size: 512B - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dwh
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dvtcp
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd266e4ac057a0b68331212ed955f1bc

Code Sign

55:21:db:26:ce:0c:b3:e4Certificate

Extended Key Usages

Key Usages

ef:be:57:b4:68:3f:18:a6:d4:77:b6:f0:de:7f:04:2a:1d:aa:80:c8Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

csafe Size: 3KB - Virtual size: 2KB

capi Size: 30KB - Virtual size: 30KB

cbxstr Size: 1024B - Virtual size: 534B

csal Size: 34KB - Virtual size: 33KB

cset Size: 3KB - Virtual size: 2KB

capihk Size: 1KB - Virtual size: 1KB

cbase64 Size: 1KB - Virtual size: 1KB

cbuff Size: 3KB - Virtual size: 2KB

ccs Size: 512B - Virtual size: 88B

conline Size: 12KB - Virtual size: 12KB

cbase Size: 14KB - Virtual size: 14KB

cpe Size: 4KB - Virtual size: 3KB

chelp Size: 9KB - Virtual size: 9KB

cinst Size: 6KB - Virtual size: 5KB

cinstsvc Size: 4KB - Virtual size: 4KB

cinstuac Size: 6KB - Virtual size: 5KB

.text Size: 2KB - Virtual size: 2KB

ckeylog Size: 4KB - Virtual size: 3KB

csi Size: 4KB - Virtual size: 4KB

css Size: 1KB - Virtual size: 1KB

csopipe Size: 1KB - Virtual size: 1KB

csosock Size: 5KB - Virtual size: 4KB

csovtcp Size: 1KB - Virtual size: 1KB

cwh Size: 512B - Virtual size: 366B

cvtcp Size: 19KB - Virtual size: 18KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 402KB

dsafe Size: 512B - Virtual size: 260B

dapi Size: 6KB - Virtual size: 6KB

dapihk Size: 512B - Virtual size: 2B

dbase64 Size: 512B - Virtual size: 1B

dbuff Size: 512B - Virtual size: 8B

dbxstr Size: 512B - Virtual size: 2B

dcs Size: 512B - Virtual size: 6B

donline Size: 512B - Virtual size: 508B

dbase Size: 512B - Virtual size: 148B

dsal Size: 2KB - Virtual size: 2KB

dhelp Size: 1KB - Virtual size: 1KB

dinst Size: 1024B - Virtual size: 884B

dinstsvc Size: 512B - Virtual size: 450B

dinstuac Size: 1024B - Virtual size: 630B

dkeylog Size: 512B - Virtual size: 192B

dpe Size: 512B - Virtual size: 1B

dsi Size: 512B - Virtual size: 254B

dss Size: 512B - Virtual size: 180B

dset Size: 512B - Virtual size: 218B

dsopipe Size: 512B - Virtual size: 6B

dsosock Size: 512B - Virtual size: 198B

dsovtcp Size: 512B - Virtual size: 5B

dwh Size: 512B - Virtual size: 8B

dvtcp Size: 512B - Virtual size: 12B

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 11KB - Virtual size: 11KB

55:21:db:26:ce:0c:b3:e4
Certificate

ef:be:57:b4:68:3f:18:a6:d4:77:b6:f0:de:7f:04:2a:1d:aa:80:c8
Signer

01/12/2022, 14:34
Valid: false

csafe
Size: 3KB - Virtual size: 2KB

capi
Size: 30KB - Virtual size: 30KB

cbxstr
Size: 1024B - Virtual size: 534B

csal
Size: 34KB - Virtual size: 33KB

cset
Size: 3KB - Virtual size: 2KB

capihk
Size: 1KB - Virtual size: 1KB

cbase64
Size: 1KB - Virtual size: 1KB

cbuff
Size: 3KB - Virtual size: 2KB

ccs
Size: 512B - Virtual size: 88B

conline
Size: 12KB - Virtual size: 12KB

cbase
Size: 14KB - Virtual size: 14KB

cpe
Size: 4KB - Virtual size: 3KB

chelp
Size: 9KB - Virtual size: 9KB

cinst
Size: 6KB - Virtual size: 5KB

cinstsvc
Size: 4KB - Virtual size: 4KB

cinstuac
Size: 6KB - Virtual size: 5KB

.text
Size: 2KB - Virtual size: 2KB

ckeylog
Size: 4KB - Virtual size: 3KB

csi
Size: 4KB - Virtual size: 4KB

css
Size: 1KB - Virtual size: 1KB

csopipe
Size: 1KB - Virtual size: 1KB

csosock
Size: 5KB - Virtual size: 4KB

csovtcp
Size: 1KB - Virtual size: 1KB

cwh
Size: 512B - Virtual size: 366B

cvtcp
Size: 19KB - Virtual size: 18KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 402KB

dsafe
Size: 512B - Virtual size: 260B

dapi
Size: 6KB - Virtual size: 6KB

dapihk
Size: 512B - Virtual size: 2B

dbase64
Size: 512B - Virtual size: 1B

dbuff
Size: 512B - Virtual size: 8B

dbxstr
Size: 512B - Virtual size: 2B

dcs
Size: 512B - Virtual size: 6B

donline
Size: 512B - Virtual size: 508B

dbase
Size: 512B - Virtual size: 148B

dsal
Size: 2KB - Virtual size: 2KB

dhelp
Size: 1KB - Virtual size: 1KB

dinst
Size: 1024B - Virtual size: 884B

dinstsvc
Size: 512B - Virtual size: 450B

dinstuac
Size: 1024B - Virtual size: 630B

dkeylog
Size: 512B - Virtual size: 192B

dpe
Size: 512B - Virtual size: 1B

dsi
Size: 512B - Virtual size: 254B

dss
Size: 512B - Virtual size: 180B

dset
Size: 512B - Virtual size: 218B

dsopipe
Size: 512B - Virtual size: 6B

dsosock
Size: 512B - Virtual size: 198B

dsovtcp
Size: 512B - Virtual size: 5B

dwh
Size: 512B - Virtual size: 8B

dvtcp
Size: 512B - Virtual size: 12B

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 11KB - Virtual size: 11KB