3ba7c62379193821b88312653ddbfd07cab7c5a70d239523f60fc5926afd35e8

Sharing

Copy URL Twitter E-mail

General

Target

3ba7c62379193821b88312653ddbfd07cab7c5a70d239523f60fc5926afd35e8
Size

1.5MB
MD5

d70f64b703b2f6197f7f8884499a304a
SHA1

d629cb346d1107b4d8e9c78c923512d73e2e7872
SHA256

3ba7c62379193821b88312653ddbfd07cab7c5a70d239523f60fc5926afd35e8
SHA512

f293b04a70173635f94d6983336c05dc2722634877c5fc35da79cf306ca5e881864e4586c6dc919a76f7493bd239a352f1715b64d21adfe26146fb2f53380810
SSDEEP

12288:Z+FT97UuIjvjKaecd5UJ1CFNSW6Ox1Ox7w0kAfHe2+Htg56okLs+Q1bO2NnRHx/x:IPSzG/i5U3UJZe7pd9lgLD2JRHxA4R

Score

1^/10

Malware Config

Signatures

Files

3ba7c62379193821b88312653ddbfd07cab7c5a70d239523f60fc5926afd35e8
.exe windows x64

Code Sign

60:66:ed:b4:f6:aa:db:8e:45:cf:3c:1e:96:ce:8d:f5
Certificate

Issuer

CN=Chengdu ShanHe Information Technology Co. Ltd

Not Before

29/05/2023, 13:10

Not After

30/05/2033, 13:10

Subject

CN=Chengdu ShanHe Information Technology Co. Ltd

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:30:b6:9a:b0:c2:fb:12:e9:0f:62:b9:be:4b:4c:f5:da:62:ea:1b:0d:2b:5d:32:a1:b9:74:c4:24:23:45:20
Signer

Actual PE Digest

a0:30:b6:9a:b0:c2:fb:12:e9:0f:62:b9:be:4b:4c:f5:da:62:ea:1b:0d:2b:5d:32:a1:b9:74:c4:24:23:45:20

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

60:66:ed:b4:f6:aa:db:8e:45:cf:3c:1e:96:ce:8d:f5Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

a0:30:b6:9a:b0:c2:fb:12:e9:0f:62:b9:be:4b:4c:f5:da:62:ea:1b:0d:2b:5d:32:a1:b9:74:c4:24:23:45:20Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.sdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 172KB - Virtual size: 171KB

60:66:ed:b4:f6:aa:db:8e:45:cf:3c:1e:96:ce:8d:f5
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

a0:30:b6:9a:b0:c2:fb:12:e9:0f:62:b9:be:4b:4c:f5:da:62:ea:1b:0d:2b:5d:32:a1:b9:74:c4:24:23:45:20
Signer

.text
Size: 1.3MB - Virtual size: 1.3MB

.sdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 172KB - Virtual size: 171KB