d4ccac73369c5a35aa89f3f8cf9e433d0b7a64387fb97b957d0c9d3bf816b3dd

Sharing

Copy URL Twitter E-mail

General

Target

d4ccac73369c5a35aa89f3f8cf9e433d0b7a64387fb97b957d0c9d3bf816b3dd
Size

5.5MB
MD5

e50ecd8dd27fdf1919a7c60d487c00c7
SHA1

bbdbbffee74d55786276a55855951f1f3986a6ed
SHA256

d4ccac73369c5a35aa89f3f8cf9e433d0b7a64387fb97b957d0c9d3bf816b3dd
SHA512

ca053d071fd7176f3289219799072908c9a665a044ab22234e9abc1b67255bb4226737fb3c3b961c119f9b33be3ad6ad5eb7938f0e456843c598767e23345bea
SSDEEP

98304:yjB1avejdUwvHhgVia/nfHo7nd+b0MOj1hC4e48KDDrJZNQX:UzUU/wg7nmjkhCADt0X

Score

1^/10

Malware Config

Signatures

Files

d4ccac73369c5a35aa89f3f8cf9e433d0b7a64387fb97b957d0c9d3bf816b3dd
.dll windows x64

Code Sign

50:35:12:26:8f:42:5f:87
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

28/08/2023, 00:00

Not After

27/08/2024, 23:59

Subject

CN=沃签电商,O=沃签电商,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

35:59:9a:db:72:fd:ed:93
Certificate

Issuer

CN=DigiCert Assured ID Root CA - G2,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/1995, 00:00

Not After

09/11/2085, 23:59

Subject

CN=DigiCert Assured ID Root CA - G2,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

28/07/2022, 08:56

Not After

27/07/2033, 08:56

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:93:3c:2a:b7:72:52:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA - G2,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2002, 00:00

Not After

09/11/2085, 23:59

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e5:87:97:4f:5d:47:ef:6b:4b:07:f5:8c:cd:24:17:76:91:c3:2e:67:6f:21:75:cd:2c:a0:85:3d:29:34:4e:a0
Signer

Actual PE Digest

e5:87:97:4f:5d:47:ef:6b:4b:07:f5:8c:cd:24:17:76:91:c3:2e:67:6f:21:75:cd:2c:a0:85:3d:29:34:4e:a0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

GetFileVersionInfoA
GetFileVersionInfoByHandle
GetFileVersionInfoExA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW

Sections

Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 41KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 18KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.winlice
Size: - Virtual size: 8.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

50:35:12:26:8f:42:5f:87Certificate

Extended Key Usages

Key Usages

35:59:9a:db:72:fd:ed:93Certificate

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

11:93:3c:2a:b7:72:52:c0Certificate

Extended Key Usages

Key Usages

e5:87:97:4f:5d:47:ef:6b:4b:07:f5:8c:cd:24:17:76:91:c3:2e:67:6f:21:75:cd:2c:a0:85:3d:29:34:4e:a0Signer

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

Size: 512B - Virtual size: 8B

Size: 41KB - Virtual size: 61KB

Size: 18KB - Virtual size: 47KB

Size: 512B - Virtual size: 7KB

Size: 2KB - Virtual size: 4KB

Size: 512B - Virtual size: 180B

Size: 1024B - Virtual size: 1KB

Size: 1KB - Virtual size: 2KB

.edata Size: 1024B - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.rsrc Size: 10KB - Virtual size: 10KB

.winlice Size: - Virtual size: 8.8MB

.boot Size: 5.4MB - Virtual size: 5.4MB

50:35:12:26:8f:42:5f:87
Certificate

35:59:9a:db:72:fd:ed:93
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

11:93:3c:2a:b7:72:52:c0
Certificate

e5:87:97:4f:5d:47:ef:6b:4b:07:f5:8c:cd:24:17:76:91:c3:2e:67:6f:21:75:cd:2c:a0:85:3d:29:34:4e:a0
Signer

.edata
Size: 1024B - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 10KB - Virtual size: 10KB

.winlice
Size: - Virtual size: 8.8MB

.boot
Size: 5.4MB - Virtual size: 5.4MB