MuMuInstaller_1[.]4[.]2[.]0_overseas-v2[.]6[.]25[.]0x64_all_1650546586[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

MuMuInstaller_1.4.2.0_overseas-v2.6.25.0x64_all_1650546586.exe
Size

8.8MB
MD5

efeaa7ebd1fcef6770a9a97c7e2a33a7
SHA1

77537bce4d991a82d57ba97ad07fc56eb512caba
SHA256

a0736594ffae05c748e1779760618907a8f9a63866a30a246c5765a25c2e7647
SHA512

8c8b6de1e888407bd55d6affcacd418454888456204509d110bc14943fdb84f53477d6b577aa4c743a18773ebba3ff66dc870253d0fa1b0f60bafbacd4f60def
SSDEEP

196608:iS3EGyvViuiiq9P8SC8ELup+2nVCJf+TCdg/mUoDdp:iPtiuYXs2n6Hdg/mUmdp

Score

1^/10

Malware Config

Signatures

Files

MuMuInstaller_1.4.2.0_overseas-v2.6.25.0x64_all_1650546586.exe
.exe windows x86

baa93d47220682c04d92f7797d9224ce

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:44:53:70:9c:84:72:5b:99:03:71:85:6b:0e:50:e0
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

27/10/2021, 00:00

Not After

23/10/2024, 23:59

Subject

SERIALNUMBER=91330000788831167A,CN=NetEase (Hangzhou) Network Co.\, Ltd,O=NetEase (Hangzhou) Network Co.\, Ltd,L=杭州市,ST=浙江省,C=CN,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b599e6b19fe79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

72:35:b2:4b:32:88:df:ac:db:a9:da:c2:4e:3e:b0:47:24:a7:90:22:e8:48:cd:10:d8:79:1c:7d:46:69:f9:60
Signer

Actual PE Digest

72:35:b2:4b:32:88:df:ac:db:a9:da:c2:4e:3e:b0:47:24:a7:90:22:e8:48:cd:10:d8:79:1c:7d:46:69:f9:60

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 947KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 111KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 11.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tvpodujo
Size: 7.8MB - Virtual size: 7.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gnjlbpuu
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

baa93d47220682c04d92f7797d9224ce

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

02:44:53:70:9c:84:72:5b:99:03:71:85:6b:0e:50:e0Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

72:35:b2:4b:32:88:df:ac:db:a9:da:c2:4e:3e:b0:47:24:a7:90:22:e8:48:cd:10:d8:79:1c:7d:46:69:f9:60Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comctl32

Sections

Size: 947KB - Virtual size: 2.3MB

.rsrc Size: 111KB - Virtual size: 264KB

.idata Size: 512B - Virtual size: 4KB

Size: 512B - Virtual size: 11.5MB

tvpodujo Size: 7.8MB - Virtual size: 7.8MB

gnjlbpuu Size: 512B - Virtual size: 4KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

02:44:53:70:9c:84:72:5b:99:03:71:85:6b:0e:50:e0
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

72:35:b2:4b:32:88:df:ac:db:a9:da:c2:4e:3e:b0:47:24:a7:90:22:e8:48:cd:10:d8:79:1c:7d:46:69:f9:60
Signer

.rsrc
Size: 111KB - Virtual size: 264KB

.idata
Size: 512B - Virtual size: 4KB

tvpodujo
Size: 7.8MB - Virtual size: 7.8MB

gnjlbpuu
Size: 512B - Virtual size: 4KB