1179d6fdb793ba85979201066ec7c405

Sharing

Copy URL

Twitter E-mail

General

Target

1179d6fdb793ba85979201066ec7c405
Size

636KB
MD5

1179d6fdb793ba85979201066ec7c405
SHA1

8bb6dc09dad200af6ef009c48219e7b928bdb518
SHA256

0721ceeaf3b5f6191c8a5dff83a404520715efe9bd3ac82a84057673181a76a7
SHA512

a724058ec44163ace9953f62770b6fa8f05381dcc5f1b55ad350c19d7a041f8fe9107334d06745d9a0301a8d36e2b1044c32700df709d07a8b01ef83e35ab343
SSDEEP

12288:YrN1SeC9c4d/7XdVvxw9rvSlclK9569xul+5w/CsLLTz9D9D9PxmlVakKJlin:gecADfxmSIO+5UCsLlin

Score

1^/10

Malware Config

Signatures

Files

1179d6fdb793ba85979201066ec7c405
.exe windows:5 windows x64 arch:x64

5fa55fd5957649106bec86694276284f

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

05:3a:d4:f9:ee:84:38:ef:16:62:ab:8d:59:92:13:ba
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-04-2019 00:00

Not After

08-04-2022 12:00

Subject

CN=miHoYo Co.\,Ltd.,OU=OPS,O=miHoYo Co.\,Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:3a:d4:f9:ee:84:38:ef:16:62:ab:8d:59:92:13:ba
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-04-2019 00:00

Not After

08-04-2022 12:00

Subject

CN=miHoYo Co.\,Ltd.,OU=OPS,O=miHoYo Co.\,Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4b:97:94:2a:26:a2:b8:63:59:45:1b:8f:13:2e:7d:dd:46:8e:3e:14:f1:d9:eb:ac:42:00:a3:62:18:ff:72:e1
Signer

Actual PE Digest

4b:97:94:2a:26:a2:b8:63:59:45:1b:8f:13:2e:7d:dd:46:8e:3e:14:f1:d9:eb:ac:42:00:a3:62:18:ff:72:e1

Digest Algorithm

sha256

PE Digest Matches

true

29:4f:f0:c4:ff:18:45:e8:04:0d:02:9b:ef:8b:e4:9e:82:15:4e:fa
Signer

Actual PE Digest

29:4f:f0:c4:ff:18:45:e8:04:0d:02:9b:ef:8b:e4:9e:82:15:4e:fa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

bh3base

ord1

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement

Sections

.tp6
Size: 21KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tp6
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tp6
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tp6
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tp6
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tp6
Size: 552KB - Virtual size: 552KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tp6d
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5fa55fd5957649106bec86694276284f

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

05:3a:d4:f9:ee:84:38:ef:16:62:ab:8d:59:92:13:baCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

05:3a:d4:f9:ee:84:38:ef:16:62:ab:8d:59:92:13:baCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

4b:97:94:2a:26:a2:b8:63:59:45:1b:8f:13:2e:7d:dd:46:8e:3e:14:f1:d9:eb:ac:42:00:a3:62:18:ff:72:e1Signer

29:4f:f0:c4:ff:18:45:e8:04:0d:02:9b:ef:8b:e4:9e:82:15:4e:faSigner

Headers

DLL Characteristics

File Characteristics

Imports

bh3base

Exports

Exports

Sections

.tp6 Size: 21KB - Virtual size: 37KB

.tp6 Size: 34KB - Virtual size: 33KB

.tp6 Size: 512B - Virtual size: 6KB

.tp6 Size: 3KB - Virtual size: 2KB

.tp6 Size: 512B - Virtual size: 160B

.tp6 Size: 552KB - Virtual size: 552KB

.tp6d Size: 11KB - Virtual size: 10KB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

05:3a:d4:f9:ee:84:38:ef:16:62:ab:8d:59:92:13:ba
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

05:3a:d4:f9:ee:84:38:ef:16:62:ab:8d:59:92:13:ba
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

4b:97:94:2a:26:a2:b8:63:59:45:1b:8f:13:2e:7d:dd:46:8e:3e:14:f1:d9:eb:ac:42:00:a3:62:18:ff:72:e1
Signer

29:4f:f0:c4:ff:18:45:e8:04:0d:02:9b:ef:8b:e4:9e:82:15:4e:fa
Signer

.tp6
Size: 21KB - Virtual size: 37KB

.tp6
Size: 34KB - Virtual size: 33KB

.tp6
Size: 512B - Virtual size: 6KB

.tp6
Size: 3KB - Virtual size: 2KB

.tp6
Size: 512B - Virtual size: 160B

.tp6
Size: 552KB - Virtual size: 552KB

.tp6d
Size: 11KB - Virtual size: 10KB