8835fecc4b53e2ce0f5f284dfea9cf383b81a72faf7533910269a3b4f93ca4a9

Sharing

Copy URL Twitter E-mail

General

Target

8835fecc4b53e2ce0f5f284dfea9cf383b81a72faf7533910269a3b4f93ca4a9
Size

5.9MB
MD5

5e44df0f6025e6080d50c6ed1fbb698e
SHA1

1aad145de531bc7e62a550ac02c653187fcaea09
SHA256

8835fecc4b53e2ce0f5f284dfea9cf383b81a72faf7533910269a3b4f93ca4a9
SHA512

7e5dc48c8d436a285773bd2ba204d537c8b8117b15bb2324fd8599362d4fd31034e80c1b225cb63b04b3f2d48641b6210871fe5b72d49090a79bc76d214af46f
SSDEEP

49152:2vBzDRTfW/LP5hc1BndGcDOkDQJQM78cmRXUF5Gv7Z5sxpjkyvFCRMaBEof5UuYu:whDRtRHDxxtp5vIAzR7lqBTtRkSZC8ZG

Score

1^/10

Malware Config

Signatures

Files

8835fecc4b53e2ce0f5f284dfea9cf383b81a72faf7533910269a3b4f93ca4a9
.exe windows x86

88381b84da56810b869e897e6d45bd58

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:96:74:e4:6b:84:46:9d:f5:2f:71:65
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

12/03/2020, 09:45

Not After

13/03/2022, 09:45

Subject

CN=Xiamen Meiya Pico Information Co.\, Ltd.,O=Xiamen Meiya Pico Information Co.\, Ltd.,L=Xiamen,ST=Fujian,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

5c:31:22:f2:10:b7:e7:a4:ad:da:77:17:fa:5e:e0:3b:9f:13:11:08
Signer

Actual PE Digest

5c:31:22:f2:10:b7:e7:a4:ad:da:77:17:fa:5e:e0:3b:9f:13:11:08

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

EnumChildWindows

Sections

.textbss
Size: - Virtual size: 996KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 14.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 510KB - Virtual size: 510KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bxpck
Size: 1024KB - Virtual size: 22.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.main
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

88381b84da56810b869e897e6d45bd58

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cdCertificate

Extended Key Usages

Key Usages

55:96:74:e4:6b:84:46:9d:f5:2f:71:65Certificate

Extended Key Usages

Key Usages

5c:31:22:f2:10:b7:e7:a4:ad:da:77:17:fa:5e:e0:3b:9f:13:11:08Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.textbss Size: - Virtual size: 996KB

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 1.1MB - Virtual size: 14.5MB

.data Size: 11KB - Virtual size: 31KB

.idata Size: 7KB - Virtual size: 7KB

.didat Size: 1KB - Virtual size: 1KB

.gfids Size: 3KB - Virtual size: 3KB

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 260B

.rsrc Size: 510KB - Virtual size: 510KB

.reloc Size: 113KB - Virtual size: 113KB

.bxpck Size: 1024KB - Virtual size: 22.6MB

.main Size: 1.1MB - Virtual size: 1.1MB

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

55:96:74:e4:6b:84:46:9d:f5:2f:71:65
Certificate

5c:31:22:f2:10:b7:e7:a4:ad:da:77:17:fa:5e:e0:3b:9f:13:11:08
Signer

.textbss
Size: - Virtual size: 996KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 1.1MB - Virtual size: 14.5MB

.data
Size: 11KB - Virtual size: 31KB

.idata
Size: 7KB - Virtual size: 7KB

.didat
Size: 1KB - Virtual size: 1KB

.gfids
Size: 3KB - Virtual size: 3KB

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 260B

.rsrc
Size: 510KB - Virtual size: 510KB

.reloc
Size: 113KB - Virtual size: 113KB

.bxpck
Size: 1024KB - Virtual size: 22.6MB

.main
Size: 1.1MB - Virtual size: 1.1MB