a5b36dd66d26d71e2fd1485aec9924c653b944089791f2aca9571034a15da567

Sharing

Copy URL

Twitter E-mail

General

Target

a5b36dd66d26d71e2fd1485aec9924c653b944089791f2aca9571034a15da567
Size

264KB
MD5

7eca9cb2b58442c114c7fae4a46230db
SHA1

67f2a88531f848513357437f848a32f163a0b639
SHA256

a5b36dd66d26d71e2fd1485aec9924c653b944089791f2aca9571034a15da567
SHA512

3c99f767fea1c6210f11430513c87d52f021bd1d354044cfe5ba09a2c4b7a26777ea6e75e559552c5e2da643869ca9e9a43e6184b01809d216eec05ea13c628a
SSDEEP

1536:OmOZxJDKJUDme7at927h9Jlb8i2z8i238i2n8i2M8i2O8i2S8i2:mxB2K3W72bJvQU0rZN

Score

1^/10

Malware Config

Signatures

Files

a5b36dd66d26d71e2fd1485aec9924c653b944089791f2aca9571034a15da567
.exe windows:6 windows x86

daebd5f40a7113aa7152ab618b0e5453

Code Sign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:65:08:23:68:f9:43:30:12:3c:9a:85:3a:2f:de:bf
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

24/11/2021, 00:00

Not After

26/11/2024, 23:59

Subject

SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Chang Zhi Network Technology Co\,. Ltd.,O=Shanghai Chang Zhi Network Technology Co\,. Ltd.,ST=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.1=#0c09e59889e5ae9ae58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:65:08:23:68:f9:43:30:12:3c:9a:85:3a:2f:de:bf
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

24/11/2021, 00:00

Not After

26/11/2024, 23:59

Subject

SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Chang Zhi Network Technology Co\,. Ltd.,O=Shanghai Chang Zhi Network Technology Co\,. Ltd.,ST=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.1=#0c09e59889e5ae9ae58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3e:23:ab:d3:c2:c2:72:a7:95:c8:07:50:f8:12:20:c5:1c:c4:71:c5:72:78:e0:2b:4e:fc:1a:de:d5:17:f8:87
Signer

Actual PE Digest

3e:23:ab:d3:c2:c2:72:a7:95:c8:07:50:f8:12:20:c5:1c:c4:71:c5:72:78:e0:2b:4e:fc:1a:de:d5:17:f8:87

Digest Algorithm

sha256

PE Digest Matches

false

8f:35:bc:0d:8f:2d:19:4e:5b:8c:50:58:2a:11:49:cc:50:b1:5a:77
Signer

Actual PE Digest

8f:35:bc:0d:8f:2d:19:4e:5b:8c:50:58:2a:11:49:cc:50:b1:5a:77

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetTickCount
WideCharToMultiByte
CreateFileW
GetLastError
CloseHandle
GetLocalTime
DecodePointer
IsDebuggerPresent
EncodePointer
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

user32

PostMessageW

shell32

SHGetFolderPathW

libcurl

curl_easy_init
curl_easy_setopt
curl_easy_perform
curl_easy_strerror
curl_easy_cleanup
curl_global_init

msvcp120

?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z

msvcr120

_except_handler4_common
?terminate@@YAXXZ
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_commode
_fmode
_wcmdln
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_cexit
_exit
_invoke_watson
_controlfp_s
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
__crtSetUnhandledExceptionFilter
??3@YAXPAX@Z
memmove
??2@YAPAXI@Z
swprintf_s
_wtoi
_purecall
sprintf
fopen_s
fwrite
fclose
??1type_info@@UAE@XZ
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__wgetmainargs
__set_app_type
exit
_except1

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 238KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

daebd5f40a7113aa7152ab618b0e5453

Code Sign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

0d:65:08:23:68:f9:43:30:12:3c:9a:85:3a:2f:de:bfCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0d:65:08:23:68:f9:43:30:12:3c:9a:85:3a:2f:de:bfCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

3e:23:ab:d3:c2:c2:72:a7:95:c8:07:50:f8:12:20:c5:1c:c4:71:c5:72:78:e0:2b:4e:fc:1a:de:d5:17:f8:87Signer

8f:35:bc:0d:8f:2d:19:4e:5b:8c:50:58:2a:11:49:cc:50:b1:5a:77Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

libcurl

msvcp120

msvcr120

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 7KB - Virtual size: 7KB

Size: 238KB - Virtual size: 238KB

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

0d:65:08:23:68:f9:43:30:12:3c:9a:85:3a:2f:de:bf
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0d:65:08:23:68:f9:43:30:12:3c:9a:85:3a:2f:de:bf
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

3e:23:ab:d3:c2:c2:72:a7:95:c8:07:50:f8:12:20:c5:1c:c4:71:c5:72:78:e0:2b:4e:fc:1a:de:d5:17:f8:87
Signer

8f:35:bc:0d:8f:2d:19:4e:5b:8c:50:58:2a:11:49:cc:50:b1:5a:77
Signer

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 7KB - Virtual size: 7KB