a0011fcc2ab6a644904216c61ec54ad3707c24fb1f3d5a96d7896e66ad42beb7

Sharing

Copy URL Twitter E-mail

General

Target

a0011fcc2ab6a644904216c61ec54ad3707c24fb1f3d5a96d7896e66ad42beb7
Size

11KB
MD5

a0e077a45d8547d14c0738aa4144927d
SHA1

0b3b4f57236a126aa56b9cce09bb7d29c0f8c12d
SHA256

a0011fcc2ab6a644904216c61ec54ad3707c24fb1f3d5a96d7896e66ad42beb7
SHA512

03ff3d7d55c12245ae1302009cf0c97db70dac45a5054eb334c7dd3225c8285503fc2cd8d2f76b2f6a818633c50844173ad3f4bc69a2468728cec788e5801c36
SSDEEP

192:wF/SAiXhL+s9eL/HAL5jOpF/VSyw0EDfBg4wwxwNIRjjhOuM:wgTT9uHMjy0yw0EDJg+yWRjA

Score

1^/10

Malware Config

Signatures

Files

a0011fcc2ab6a644904216c61ec54ad3707c24fb1f3d5a96d7896e66ad42beb7
.dll windows x86

5c35aee417d6de6146b2e47234215864

Code Sign

0c:34:75:ee:e7:09:01:e5:e2:30:8a:bd:f2:20:5b:f3:44:ee:6b:7c
Certificate

Issuer

CN=Wythe Wang,O=:Wanin International Co.\, Ltd[D[D[3~[3~[C[C[C[CCo Ltd,L=Taichung,ST=Taiwan,C=TW,1.2.840.113549.1.9.1=#0c1377797468652e77616e674077616e696e2e7477

Not Before

19/07/2023, 05:42

Not After

18/07/2024, 05:42

Subject

CN=Wythe Wang,O=:Wanin International Co.\, Ltd[D[D[3~[3~[C[C[C[CCo Ltd,L=Taichung,ST=Taiwan,C=TW,1.2.840.113549.1.9.1=#0c1377797468652e77616e674077616e696e2e7477

1d:6b:ac:67:85:06:2a:00:f2:a0:89:97:b9:16:a6:9d:c5:8a:41:f0:d2:d7:73:55:e9:b5:1c:7d:3c:d6:d7:56
Signer

Actual PE Digest

1d:6b:ac:67:85:06:2a:00:f2:a0:89:97:b9:16:a6:9d:c5:8a:41:f0:d2:d7:73:55:e9:b5:1c:7d:3c:d6:d7:56

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_onexit_table
_cexit
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment

kernel32

GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
UnhandledExceptionFilter
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c35aee417d6de6146b2e47234215864

Code Sign

0c:34:75:ee:e7:09:01:e5:e2:30:8a:bd:f2:20:5b:f3:44:ee:6b:7cCertificate

1d:6b:ac:67:85:06:2a:00:f2:a0:89:97:b9:16:a6:9d:c5:8a:41:f0:d2:d7:73:55:e9:b5:1c:7d:3c:d6:d7:56Signer

Headers

DLL Characteristics

File Characteristics

Imports

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 916B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 316B

0c:34:75:ee:e7:09:01:e5:e2:30:8a:bd:f2:20:5b:f3:44:ee:6b:7c
Certificate

1d:6b:ac:67:85:06:2a:00:f2:a0:89:97:b9:16:a6:9d:c5:8a:41:f0:d2:d7:73:55:e9:b5:1c:7d:3c:d6:d7:56
Signer

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 916B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 316B