HaoZip_v5[.]9[.]8[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

HaoZip_v5.9.8.exe
Size

8.5MB
MD5

40d029bcbbf408d4aa71a041ef5480d0
SHA1

73f8e1325a6df0a0da7a3fd3a708c292de4cd2c3
SHA256

5721a4a44c6fddbfa8879f83525f73ad06f9a525beb25b681ff380f77f697983
SHA512

f8deb51614f5638af7400a3c5dbb20963a1d254d3c5bd835c8880df8df9a86c2e9021ecd4eba7292f60d559c864116e4a74c394c7452322f8604489667f7ca0f
SSDEEP

196608:PLXt31/ONs5nIP8g+/6iPeQFClJmsiPcE91/ZQXJ6UsfyTs:PDr2QnID86iP/kbbwcZZ6Uc

Score

1^/10

Malware Config

Signatures

Files

HaoZip_v5.9.8.exe
.exe windows:1 windows x86

Code Sign

3c:de:70:68:d1:0e:d1:42:b1:89:80:90:5b:50:3f:fa
Certificate

Issuer

CN=Root Agency

Not Before

10/04/2016, 15:59

Not After

31/12/2039, 23:59

Subject

CN=qiuquan.cc

Extended Key Usages

ExtKeyUsageCodeSigning

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c2:8c:dd:2f:3e:3b:f7:d3:26:50:1a:34:cb:a3:a5:3c:7b:fc:02:32
Signer

Actual PE Digest

c2:8c:dd:2f:3e:3b:f7:d3:26:50:1a:34:cb:a3:a5:3c:7b:fc:02:32

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

3c:de:70:68:d1:0e:d1:42:b1:89:80:90:5b:50:3f:faCertificate

Extended Key Usages

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4cCertificate

Extended Key Usages

Key Usages

c2:8c:dd:2f:3e:3b:f7:d3:26:50:1a:34:cb:a3:a5:3c:7b:fc:02:32Signer

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 37KB - Virtual size: 36KB

DATA Size: 1024B - Virtual size: 588B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 21KB - Virtual size: 20KB

3c:de:70:68:d1:0e:d1:42:b1:89:80:90:5b:50:3f:fa
Certificate

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

c2:8c:dd:2f:3e:3b:f7:d3:26:50:1a:34:cb:a3:a5:3c:7b:fc:02:32
Signer

CODE
Size: 37KB - Virtual size: 36KB

DATA
Size: 1024B - Virtual size: 588B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 21KB - Virtual size: 20KB