b2e6ebe4b5e3c39db262ed7b067e7472018050c454c959d228edd39b81d3a342

Sharing

Copy URL Twitter E-mail

General

Target

b2e6ebe4b5e3c39db262ed7b067e7472018050c454c959d228edd39b81d3a342
Size

1.6MB
MD5

5ea00dc3668710dafe1699cf54b75115
SHA1

8356dd06a787ce0c8983fd08c835d03854920da1
SHA256

b2e6ebe4b5e3c39db262ed7b067e7472018050c454c959d228edd39b81d3a342
SHA512

ce3561a66eb024d6e9754e874819e5dec26cd79ddbc741782863ed69529147332c9af6c7982023a35202627fc54b3723517f9df8080f2f8f0c8d05998b5dbf6b
SSDEEP

24576:4l+4jRQlOSUg1WBrjUAaam9N1beAYxwCAS2tZ7RsYZAL6qr4jJyFRvzU4D:T4ikq14jUDamqk31s36qW8Bp

Score

1^/10

Malware Config

Signatures

Files

b2e6ebe4b5e3c39db262ed7b067e7472018050c454c959d228edd39b81d3a342
.exe windows x86

baa93d47220682c04d92f7797d9224ce

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:41

Not After

15/04/2021, 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:69:00:5d:bc:45:70:12:e3:71:66:72:1c:4c:b0:eb
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

12/04/2021, 00:00

Not After

20/04/2022, 23:59

Subject

CN=Beijing Kingsoft Security software Co.\,Ltd,O=Beijing Kingsoft Security software Co.\,Ltd,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7e:50:b1:47:d1:78:4c:a3:e1:18:8f:85:7b:31:ab:c4:de:66:f7:44:8e:27:50:74:9b:da:71:ed:85:43:87:0b
Signer

Actual PE Digest

7e:50:b1:47:d1:78:4c:a3:e1:18:8f:85:7b:31:ab:c4:de:66:f7:44:8e:27:50:74:9b:da:71:ed:85:43:87:0b

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 352KB - Virtual size: 796KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 621KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ctvvyexm
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ykedbbxm
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

baa93d47220682c04d92f7797d9224ce

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

61:1c:b2:8a:00:00:00:00:00:26Certificate

Key Usages

0b:69:00:5d:bc:45:70:12:e3:71:66:72:1c:4c:b0:ebCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

7e:50:b1:47:d1:78:4c:a3:e1:18:8f:85:7b:31:ab:c4:de:66:f7:44:8e:27:50:74:9b:da:71:ed:85:43:87:0bSigner

Headers

File Characteristics

Imports

kernel32

comctl32

Sections

Size: 352KB - Virtual size: 796KB

.rsrc Size: 148KB - Virtual size: 621KB

.idata Size: 4KB - Virtual size: 4KB

Size: 4KB - Virtual size: 1.1MB

ctvvyexm Size: 1.0MB - Virtual size: 1.0MB

ykedbbxm Size: 4KB - Virtual size: 4KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

61:1c:b2:8a:00:00:00:00:00:26
Certificate

0b:69:00:5d:bc:45:70:12:e3:71:66:72:1c:4c:b0:eb
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

7e:50:b1:47:d1:78:4c:a3:e1:18:8f:85:7b:31:ab:c4:de:66:f7:44:8e:27:50:74:9b:da:71:ed:85:43:87:0b
Signer

.rsrc
Size: 148KB - Virtual size: 621KB

.idata
Size: 4KB - Virtual size: 4KB

ctvvyexm
Size: 1.0MB - Virtual size: 1.0MB

ykedbbxm
Size: 4KB - Virtual size: 4KB