c839c01b0a3d4dbcb1f011ee413408c0_exe32[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

c839c01b0a3d4dbcb1f011ee413408c0_exe32.exe
Size

3.4MB
MD5

c839c01b0a3d4dbcb1f011ee413408c0
SHA1

c5a7d686b5e892115e8eb9eafc340cc622964f03
SHA256

79a66a8f06e6ba9b52513f93c8308ed7e14db69f95a9082c7bbd707eda1e1e36
SHA512

243b6874e7c3ae84d9ed1b553bcb1b09d05dc5f41614c1993fb8ba5f8b90553f15dbe4679a01f21506d9c8e5444d3e49628ba8506a7fb5383f4add7e3a881410
SSDEEP

98304:Bspv+ec1mCA7xBqbCmqlB2YB+ny+4934ecF8mjx:mTc1mCRolBPB+ny+oyXx

Score

1^/10

Malware Config

Signatures

Files

c839c01b0a3d4dbcb1f011ee413408c0_exe32.exe
.exe windows:4 windows x86

d5e0355f8764c235b38759b860077ceb

Code Sign

0b:2b:f8:e6:d3:4c:43:ee:0c:bf:d2:08:78:61:6e:19
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

30/05/2023, 00:00

Not After

15/06/2025, 00:00

Subject

CN=Beijing Kylin Culture Co.\,Ltd,O=Beijing Kylin Culture Co.\,Ltd,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:87:d9:61:1c:fa:62:eb:7e:0d:e5:f5:67:f7:78:2f:78:70:a8:6a:d3:a9:1b:a7:34:5b:24:7c:cf:96:21:8b
Signer

Actual PE Digest

0a:87:d9:61:1c:fa:62:eb:7e:0d:e5:f5:67:f7:78:2f:78:70:a8:6a:d3:a9:1b:a7:34:5b:24:7c:cf:96:21:8b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

MessageBoxA

Sections

.text
Size: 2.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 410KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 45KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kylin9
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d5e0355f8764c235b38759b860077ceb

Code Sign

0b:2b:f8:e6:d3:4c:43:ee:0c:bf:d2:08:78:61:6e:19Certificate

Extended Key Usages

Key Usages

0a:87:d9:61:1c:fa:62:eb:7e:0d:e5:f5:67:f7:78:2f:78:70:a8:6a:d3:a9:1b:a7:34:5b:24:7c:cf:96:21:8bSigner

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 2.9MB - Virtual size: 8.9MB

.rdata Size: 410KB - Virtual size: 2.2MB

.data Size: 45KB - Virtual size: 1.2MB

.rsrc Size: 18KB - Virtual size: 96KB

.kylin9 Size: 512B - Virtual size: 4KB

.data Size: 28KB - Virtual size: 28KB

0b:2b:f8:e6:d3:4c:43:ee:0c:bf:d2:08:78:61:6e:19
Certificate

0a:87:d9:61:1c:fa:62:eb:7e:0d:e5:f5:67:f7:78:2f:78:70:a8:6a:d3:a9:1b:a7:34:5b:24:7c:cf:96:21:8b
Signer

.text
Size: 2.9MB - Virtual size: 8.9MB

.rdata
Size: 410KB - Virtual size: 2.2MB

.data
Size: 45KB - Virtual size: 1.2MB

.rsrc
Size: 18KB - Virtual size: 96KB

.kylin9
Size: 512B - Virtual size: 4KB

.data
Size: 28KB - Virtual size: 28KB