aba0ee9b59c0f8114abdd258a9e3a01d9928816b6b3ffd25bd2b9ac62d75f88a

Sharing

Copy URL

Twitter E-mail

General

Target

aba0ee9b59c0f8114abdd258a9e3a01d9928816b6b3ffd25bd2b9ac62d75f88a
Size

201KB
MD5

438fe1a43c316223c5310a2e71132b1c
SHA1

3ca90032a60c62f8ebf13bf1a6fc15ee5978cbf4
SHA256

aba0ee9b59c0f8114abdd258a9e3a01d9928816b6b3ffd25bd2b9ac62d75f88a
SHA512

d2c88681020f9bfd0fd56b03f66987ffd7c9f05b14b5e41bde055b3e7c1fb03502ada7f525bd706511d9fa638e097f7e85482c64bc5d31d7def92cfe736f6ad5
SSDEEP

6144:MwYEf/HqSnofL4YGwmNx8SoQYNIcGoPsLeVMorTv:BJnoNhD1PhrTv

Score

1^/10

Malware Config

Signatures

Files

aba0ee9b59c0f8114abdd258a9e3a01d9928816b6b3ffd25bd2b9ac62d75f88a
.dll windows x86

5f6a55d31de946119919d3d7f634e894

Code Sign

3a:72:53:f4:1f:32:e5:6d:af:f1:d7:2b:86:67:b0:26
Certificate

Issuer

CN=Quantum EV Secure Code Signing CN RSA R1,O=Quantum CA Limited,C=GB

Not Before

21-07-2022 18:59

Not After

21-07-2023 13:50

Subject

SERIALNUMBER=91310116MA1JAA69XR,CN=上海链度科技有限公司,OU=IT,O=上海链度科技有限公司,L=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:f8:12:a3:5f:52:bd:74:b7:18:d6:10:ac:4b:47:83
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11-09-2018 09:28

Not After

11-09-2023 09:28

Subject

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

29:fc:b8:a5:51:fa:44:f6:a9:ff:05:17:5a:68:4f:ac
Certificate

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

09-02-2021 19:44

Not After

07-02-2031 19:44

Subject

CN=Quantum EV Secure Code Signing CN RSA R1,O=Quantum CA Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3a:72:53:f4:1f:32:e5:6d:af:f1:d7:2b:86:67:b0:26
Certificate

Issuer

CN=Quantum EV Secure Code Signing CN RSA R1,O=Quantum CA Limited,C=GB

Not Before

21-07-2022 18:59

Not After

21-07-2023 13:50

Subject

SERIALNUMBER=91310116MA1JAA69XR,CN=上海链度科技有限公司,OU=IT,O=上海链度科技有限公司,L=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:f8:12:a3:5f:52:bd:74:b7:18:d6:10:ac:4b:47:83
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11-09-2018 09:28

Not After

11-09-2023 09:28

Subject

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

29:fc:b8:a5:51:fa:44:f6:a9:ff:05:17:5a:68:4f:ac
Certificate

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

09-02-2021 19:44

Not After

07-02-2031 19:44

Subject

CN=Quantum EV Secure Code Signing CN RSA R1,O=Quantum CA Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ef:9c:12:56:d0:4e:74:dc:94:5a:a3:63:71:0b:9c:58:10:6c:f4:93:43:84:60:5f:55:3e:d1:22:b7:23:6a:5a
Signer

Actual PE Digest

ef:9c:12:56:d0:4e:74:dc:94:5a:a3:63:71:0b:9c:58:10:6c:f4:93:43:84:60:5f:55:3e:d1:22:b7:23:6a:5a

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=91310116MA1JAA69XR,CN=上海链度科技有限公司,OU=IT,O=上海链度科技有限公司,L=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

01-01-0001 00:00
Valid: false

26:5b:ba:49:5e:52:1c:c3:1d:0f:31:b6:c8:23:ae:98:12:b2:66:f5
Signer

Actual PE Digest

26:5b:ba:49:5e:52:1c:c3:1d:0f:31:b6:c8:23:ae:98:12:b2:66:f5

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=91310116MA1JAA69XR,CN=上海链度科技有限公司,OU=IT,O=上海链度科技有限公司,L=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

01-01-0001 00:00
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord6055
ord4078
ord1776
ord4407
ord2385
ord5163
ord4353
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord1727
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord807
ord2920
ord2012
ord2120
ord554
ord4163
ord1644
ord1146
ord939
ord940
ord941
ord5787
ord4133
ord4297
ord1621
ord537
ord2764
ord4202
ord5856
ord536
ord2452
ord2753
ord1195
ord472
ord5572
ord2919
ord5450
ord6394
ord5440
ord6383
ord2575
ord5290
ord3402
ord4396
ord5241
ord6374
ord5065
ord5261
ord2446
ord3574
ord809
ord609
ord556
ord567
ord4275
ord4284
ord2379
ord5053
ord4774
ord5981
ord6270
ord3874
ord283
ord613
ord6880
ord289
ord2122
ord4160
ord6907
ord3998
ord5678
ord2587
ord4406
ord3394
ord3729
ord2582
ord4402
ord3370
ord3640
ord6741
ord5265
ord4376
ord4853
ord4998
ord2514
ord6052
ord1775
ord5280
ord4425
ord3597
ord6508
ord656
ord693
ord804
ord641
ord324
ord2302
ord4234
ord4710
ord3302
ord3797
ord3996
ord6215
ord6785
ord2642
ord4224
ord3873
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord616
ord795
ord692
ord2818
ord2820
ord3811
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord2621
ord1134
ord1168
ord755
ord470
ord3719
ord793
ord2294
ord2362
ord6334
ord2645
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord3721
ord2086
ord5655
ord6625
ord4299
ord955
ord6662
ord2754
ord6128
ord5148
ord5768
ord3752
ord4694
ord4476
ord5794
ord5789
ord5873
ord6172
ord6021
ord6189
ord4330
ord6186
ord5756
ord6192
ord5759
ord2971
ord3619
ord1641
ord858
ord2614
ord5788
ord2567
ord2414
ord5683
ord1175
ord5860
ord2408
ord2096
ord2864
ord2405
ord323
ord1640
ord5785
ord6194
ord640
ord3596
ord5864
ord6061
ord5571
ord5579
ord3610
ord5736
ord4277
ord2763
ord4129
ord5875
ord3626
ord3693
ord3573
ord3571
ord2859
ord5606
ord2863
ord4083
ord6142
ord823
ord2438
ord3663
ord3654
ord2584
ord4220
ord1862
ord825
ord500
ord3701
ord772
ord540
ord1574
ord860
ord535
ord800
ord1099
ord686
ord6199
ord384

msvcrt

_CxxThrowException
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
printf
_mbschr
exit
strcpy
__CxxFrameHandler
malloc
memset
free
wcscpy
wcslen
_ftol
memcpy
_mbscmp
strlen
memmove
_mbsnbcpy
sprintf

kernel32

VirtualAlloc
ResetEvent
WaitForSingleObject
CreateThread
CloseHandle
CreateEventA
GetProfileStringA
GlobalFree
GlobalLock
GlobalAlloc
lstrcpynA
Sleep
MulDiv
InterlockedDecrement
GetPrivateProfileStringA
lstrcmpiA
FindResourceA
LoadResource
LockResource
GetCPInfo
lstrlenW
lstrlenA
GetVersion
GetVersionExA
GetLastError
MultiByteToWideChar
WideCharToMultiByte
LocalFree
DisableThreadLibraryCalls

user32

LoadBitmapA
GetSysColorBrush
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuState
ModifyMenuA
GetMenuItemCount
AppendMenuA
GetSystemMetrics
TabbedTextOutA
GetDC
DrawTextA
ReleaseDC
DrawIconEx
DestroyIcon
SystemParametersInfoA
CopyRect
FillRect
DrawEdge
SetRect
GetMenuItemInfoA
GrayStringA
GetSubMenu
GetMenuStringA
EnableWindow
DestroyCursor
GetWindowLongA
UpdateWindow
GetDlgCtrlID
SetWindowPos
SetWindowLongA
SetClassLongA
GetCursorPos
IsWindow
GetSysColor
PtInRect
CallWindowProcA
IsIconic
DrawIcon
GetSystemMenu
LoadIconA
MessageBoxA
LoadImageA
GetIconInfo
CreateIconIndirect
DrawStateA
GetClientRect
FrameRect
InflateRect
OffsetRect
DrawFocusRect
GetWindowRect
PostMessageA
ClientToScreen
WindowFromPoint
GetActiveWindow
InvalidateRect
SetCursor
GetParent
GetNextDlgTabItem
IsMenu
GetDesktopWindow
SendMessageA

gdi32

CreateDIBSection
SetPixel
GetPixel
GetObjectA
PtVisible
RectVisible
PatBlt
TextOutA
ExtTextOutA
Escape
Rectangle
SelectObject
SetBkColor
CreateBitmap
AbortDoc
EndDoc
EndPage
StartPage
StartDocA
CreateFontA
CreatePatternBrush
SetWindowOrgEx
CreateDCA
DeleteObject
DeleteDC
Ellipse
GetTextExtentPoint32A
GetTextExtentPoint32W
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectA
CreateSolidBrush
CreatePen
GetStockObject
GetDeviceCaps
GetBkMode

winspool.drv

DocumentPropertiesA

advapi32

RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA

shell32

ShellExecuteExA

comctl32

ImageList_Draw
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_GetIcon
_TrackMouseEvent

ole32

CoInitialize
OleRun
CoCreateInstance

oleaut32

VariantCopy
VariantInit
GetErrorInfo
SysFreeString
SysAllocString
VariantChangeType
SysAllocStringByteLen
SysStringByteLen
VariantClear

ws2_32

gethostbyname
htons
send
closesocket
WSACleanup
WSAStartup
recv
connect
socket

msvcp60

??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

Exports

Exports

cef_api_hash
cef_browser_host_create_browser
cef_clear_cache
cef_command_line_create
cef_command_line_get_global
cef_cookie_manager_get_global_manager
cef_currently_on
cef_drag_data_create
cef_execute_process
cef_get_extensions_for_mime_type
cef_initialize
cef_log
cef_post_delayed_task
cef_post_task
cef_process_message_create
cef_quit_message_loop
cef_run_message_loop
cef_shutdown
cef_stream_reader_create_for_file
cef_stream_writer_create_for_handler
cef_string_ascii_to_utf16
cef_string_list_alloc
cef_string_list_append
cef_string_list_copy
cef_string_list_free
cef_string_list_size
cef_string_list_value
cef_string_map_alloc
cef_string_map_append
cef_string_map_free
cef_string_map_key
cef_string_map_size
cef_string_map_value
cef_string_multimap_alloc
cef_string_multimap_append
cef_string_multimap_free
cef_string_multimap_key
cef_string_multimap_size
cef_string_multimap_value
cef_string_userfree_utf16_free
cef_string_utf16_clear
cef_string_utf16_cmp
cef_string_utf16_set
cef_string_utf16_to_utf8
cef_string_utf8_clear
cef_string_utf8_to_utf16
cef_string_wide_to_utf8
cef_task_runner_get_for_thread
cef_v8value_create_function
cef_v8value_create_object
cef_v8value_create_string

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f6a55d31de946119919d3d7f634e894

Code Sign

3a:72:53:f4:1f:32:e5:6d:af:f1:d7:2b:86:67:b0:26Certificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

62:f8:12:a3:5f:52:bd:74:b7:18:d6:10:ac:4b:47:83Certificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

29:fc:b8:a5:51:fa:44:f6:a9:ff:05:17:5a:68:4f:acCertificate

Extended Key Usages

Key Usages

3a:72:53:f4:1f:32:e5:6d:af:f1:d7:2b:86:67:b0:26Certificate

Extended Key Usages

Key Usages

62:f8:12:a3:5f:52:bd:74:b7:18:d6:10:ac:4b:47:83Certificate

Key Usages

29:fc:b8:a5:51:fa:44:f6:a9:ff:05:17:5a:68:4f:acCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

ef:9c:12:56:d0:4e:74:dc:94:5a:a3:63:71:0b:9c:58:10:6c:f4:93:43:84:60:5f:55:3e:d1:22:b7:23:6a:5aSigner

Signature Validations

Verification

01-01-0001 00:00 Valid: false

26:5b:ba:49:5e:52:1c:c3:1d:0f:31:b6:c8:23:ae:98:12:b2:66:f5Signer

Signature Validations

Verification

01-01-0001 00:00 Valid: false

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

ws2_32

msvcp60

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 114KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 16KB - Virtual size: 12KB

3a:72:53:f4:1f:32:e5:6d:af:f1:d7:2b:86:67:b0:26
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

62:f8:12:a3:5f:52:bd:74:b7:18:d6:10:ac:4b:47:83
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

29:fc:b8:a5:51:fa:44:f6:a9:ff:05:17:5a:68:4f:ac
Certificate

3a:72:53:f4:1f:32:e5:6d:af:f1:d7:2b:86:67:b0:26
Certificate

62:f8:12:a3:5f:52:bd:74:b7:18:d6:10:ac:4b:47:83
Certificate

29:fc:b8:a5:51:fa:44:f6:a9:ff:05:17:5a:68:4f:ac
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

ef:9c:12:56:d0:4e:74:dc:94:5a:a3:63:71:0b:9c:58:10:6c:f4:93:43:84:60:5f:55:3e:d1:22:b7:23:6a:5a
Signer

01-01-0001 00:00
Valid: false

26:5b:ba:49:5e:52:1c:c3:1d:0f:31:b6:c8:23:ae:98:12:b2:66:f5
Signer

01-01-0001 00:00
Valid: false

.text
Size: 116KB - Virtual size: 114KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 16KB - Virtual size: 12KB