155c56ab59d1d04617058ec1e60df08a53193c9d1cb4b01be031bb93f12be2e7

Sharing

Copy URL Twitter E-mail

General

Target
155c56ab59d1d04617058ec1e60df08a53193c9d1cb4b01be031bb93f12be2e7
Size 5.5MB
Sample240125-tezwaaabe6
SHA256 155c56ab59d1d04617058ec1e60df08a53193c9d1cb4b01be031bb93f12be2e7
MD5 95b3f93daa6353f164446fe6e93c998d
SHA1 ad1c77f48f721cc84e11f222af51a14a9caf4058
SHA512 3f7bee83993763c30f2f1a51f3210f90a77e413de0699fa83e9a7f4f3ab82d925381507c66b023a93e34295f7cf0a6241c48f0fa4f84c550d332e7a927e3c2a6
SSDEEP 98304:A8UnXrt3bc0O68nEtN7uS36KrxSHvZLNrlhFkH3M09ejSUBqicDNyv4qEcbcPXN:A7bVY0H1NNFeJkXN9vUwr+4Tk2N
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

155c56ab59d1d04617058ec1e60df08a53193c9d1cb4b01be031bb93f12be2e7

.dll 5.5MB

155c56ab59d1d04617058ec1e60df08a53193c9d1cb4b01be031bb93f12be2e7

IMPHASH db60e6813dff8f740e42d22b3a34ba6d
SHA256 155c56ab59d1d04617058ec1e60df08a53193c9d1cb4b01be031bb93f12be2e7
MD5 95b3f93daa6353f164446fe6e93c998d
SHA1 ad1c77f48f721cc84e11f222af51a14a9caf4058
SHA512 3f7bee83993763c30f2f1a51f3210f90a77e413de0699fa83e9a7f4f3ab82d925381507c66b023a93e34295f7cf0a6241c48f0fa4f84c550d332e7a927e3c2a6
SSDEEP 98304:A8UnXrt3bc0O68nEtN7uS36KrxSHvZLNrlhFkH3M09ejSUBqicDNyv4qEcbcPXN:A7bVY0H1NNFeJkXN9vUwr+4Tk2N
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

1e:ef:2f:fe:17:fc:5b:c9:ec:06:95:16:66:77:42:c7:0b:1d:45:ee:a7:d8:41:78:d3:ec:47:4f:f0:64:a8:6a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Dingli Corp.\, Ltd.,OU=Software development Department,O=Dingli Corp.\, Ltd.,L=Zhuhai,ST=Guangdong,C=CN

Chains

Sep 6, 2023

CN=Dingli Corp.\, Ltd.,OU=Software development Department,O=Dingli Corp.\, Ltd.,L=Zhuhai,ST=Guangdong,C=CN

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=Dingli Corp.\, Ltd.,OU=Software development Department,O=Dingli Corp.\, Ltd.,L=Zhuhai,ST=Guangdong,C=CN

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=Dingli Corp.\, Ltd.,OU=Software development Department,O=Dingli Corp.\, Ltd.,L=Zhuhai,ST=Guangdong,C=CN

Serial Number

52:f8:79:2e:07:19:49:53:59:16:e1:4f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 22, 2021 - Dec 22, 2024

Subject

CN=Fake TimeStamp Responder,OU=timestamp.pki.jemmylovejenny.tk,O=JemmyLoveJenny PKI Service,C=CN

Serial Number

1e:b1:32:d5:08:9c:51:ab:0d:f2:6e:85:4e:b0:dd:a7

Issuer

CN=JemmyLoveJenny SHA2 TimeStamping Services CA,OU=pki.jemmylovejenny.tk,O=JemmyLoveJenny PKI Service,C=CN

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2000 - Dec 31, 2099

Subject

CN=JemmyLoveJenny SHA2 TimeStamping Services CA,OU=pki.jemmylovejenny.tk,O=JemmyLoveJenny PKI Service,C=CN

Serial Number

1e:b1:32:d5:08:9c:51:ab

Issuer

CN=JemmyLoveJenny EV Root CA,OU=pki.jemmylovejenny.tk,O=JemmyLoveJenny PKI Service,C=CN

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2000 - Dec 31, 2099

Minor OS version

Major OS version

Entry point

7913472

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

?DMCalcCustomParms@Common@@YAHPAX@Z ?DMConfigDecodeOrStoragePropertyForDev@@YAHHHH_J@Z ?DMExportPOLQAFileByFields@@YAHPBD0HPAPAD@Z ?DMGetErrorInfoW_JobManager@@YAPA_WH@Z CompressFile DMAMTPGetConfig DMAMTPInit DMAMTPLogin DMAMTPLogout DMAMTPModuleConfig DMAMTPRegCallBack DMAMTPReportState DMAMTPStopUplodData DMAMTPUninit DMAMTPUploadDataFile DMAMTPUploadDataRealTime DMAdbOpenDevicePort DMAddDev DMAddDevice DMAddTestPlan DMCalcGPSTotalMileage DMCameraEdit DMCameraPause DMCameraReplay DMCameraSetTime DMCameraStartPlay DMCameraStopPlay DMCheckDataSetExist DMCheckDecodeFileValid DMCheckDongleLicense DMCheckPioneerToolsIsRunning DMClearAllCustomEvent DMClearSingleGPSItem DMCloseATPort DMCloseDataSetV2 DMCloseKPIFile_UnifyKPI DMCombinateDCFFiles DMCombinateDDIBFiles DMCombinateDDIBFilesEx DMConfigDecodeOrStorageComplexProperty DMConfigDecodeOrStorageProperty DMConfigDecodeOrStoragePropertyInterface DMConfigDecodeOrStorageStringProperty DMConfigDecodeOrStorageStringPropertyInterface DMConnectDevice DMConnectGyroscope DMConnectRemoteServer DMContinueSchedule DMCopyPioneerToolsLog DMCreateDeviceManagerHandle DMCreateRedecodeHandle DMCreateRequest DMCreateRequestEx DMCreateRequestEx_JobManager DMCreateRequest_JobManager DMCreateTCPIPMonitorControl DMDailUp DMDataSetFreeMemory DMDelAllDevice DMDelDecodedFile DMDelDevice DMDestoryTCPIPMonitorControl DMDisconnectDevice DMDisconnectGyroscope DMDisconnectRemoteServer DMDivideFileFromDCFFileByTime DMDivideFileFromDCFFileByZone DMDivideFileFromDataSet DMDongleCurrentTime DMEnableLoger DMExistsSetCellFrequencyOrPNList DMExportPOLQALicenseFile DMFilterPointZonesFromDataSet DMFindHisiDeviceInfo DMFindPOLQAEnvironment DMFinshCalcOnePESQ DMFreeDeviceManagerHandle DMFreeKPIDetail_UnifyKPI DMFreeRedecodeHandle DMGetActiveCellCount DMGetActiveCellParamRealValue DMGetActiveCellParamValue DMGetAppearsObserverItem DMGetAppointSPCount DMGetBaseInfoResult_UnifyKPI DMGetBinCondition DMGetBinPointFRMDLTParamValueInfo DMGetBinPointID DMGetBinPointParamDetailInfo DMGetBinPointParamValueInfo DMGetBinPointTimeRange DMGetBinPointWorseParamValueInfo DMGetCanRestoreCancelMarkCount DMGetComputerTimeTestRange DMGetControlDeviceState DMGetCountOfOneEvent DMGetCurrWritingFileInfo DMGetCurrentLogID DMGetCurrentRcuFileSize DMGetCustomConditionFilterResult DMGetCustomStorageDefinedInfoCount DMGetCustomStorageDefinedInfoName DMGetDateTimeEx DMGetDecodeFileStorageVersion DMGetDecryptEnabled DMGetDevStatus DMGetDevTaskInfo DMGetDeviceInfoByIndex DMGetDeviceModelName DMGetDeviceParent DMGetDeviceState DMGetDeviceType DMGetDeviceVendor DMGetDongleID DMGetErrorInfoW DMGetEventByPointIndex DMGetEventCountByPointIndex DMGetEventCountEx DMGetEventDetailsByEventFlagAndIndex DMGetEventInfoByEventIndex DMGetEventPointIndexes DMGetEventPropertyDoubleValue DMGetEventPropertyExtentValue DMGetEventPropertyFloatValue DMGetEventPropertyInt64Value DMGetEventPropertyIntValue DMGetEventPropertyStringValue DMGetEventSerializeMemory DMGetEventsEx DMGetEventsEx_TestManager DMGetExistEventFlagList DMGetExistMsgCodeTypeList DMGetExistSPList DMGetExistsStructSpecificIDList DMGetGPSPointCount DMGetGPSValidRange DMGetGPSValue DMGetHaveValueParamList DMGetHaveValueSpecificIDList DMGetHisiDevName DMGetHisiDeviceOtherName DMGetIndoorMagInfos DMGetIndoorMagPictureContents DMGetIndoorMagPictureNames DMGetIndoorMapInfoCount DMGetInt64ParamValue DMGetIsTestDataSet DMGetKMLStationCoordinate DMGetLayer3OriginalMsgContent DMGetLicenseByBoolParam DMGetLicenseByInt64Param DMGetLicenseByNetParam DMGetLogInfoResult_UnifyKPI DMGetMOMTDetailInfoResult_UnifyKPI DMGetMOSPESQ DMGetMessageCode DMGetMessageContent DMGetMessageName DMGetMsgCodePointIndexList DMGetMsgDirection DMGetMsgXMLContentEx DMGetNearlyPointIndexByEventCode DMGetNetType DMGetNetWorkState DMGetNewEvents DMGetNextMsgCode DMGetOnePointAllParamsValue DMGetOneTestInfo DMGetPOLQALicenseFile DMGetParamBaseFilterResult DMGetParamRealPointListEx DMGetParamRealValue DMGetParamRealValueByRealValueIndex DMGetParamRealValueIndexByPointIndex DMGetParamRealValueList DMGetParamRealValueTotalCount DMGetParamValue DMGetPioneerToolsInfo DMGetPioneerToolsVersion DMGetPointIndexByParamRealValueIndex DMGetPointInterZoneByGPSIndex DMGetPort DMGetRandomCheckMark DMGetRcuHead DMGetRealGPSInfo DMGetRealGPSProtocolTime DMGetRedcodingProcess DMGetRelativePointIndexByDistance DMGetRelativePointIndexByTime DMGetRequestState DMGetRequestState_JobManager DMGetRowCount_UnifyKPI DMGetSPEventCount DMGetSPEventIndexList DMGetSPIndexList DMGetSameComputerTimePointIndexRange DMGetScannerFieldSerializeMemory DMGetSceneInfoResult_UnifyKPI DMGetSerialNumber DMGetSetCellCount DMGetSetCellCountBySetType DMGetSetCellParamRealValue DMGetSetCellParamRealValueByFrequencyAndPN DMGetSetCellParamRealValueByPN DMGetSetCellParamRealValueBySetType DMGetSetCellParamValue DMGetSetCellParamValueByFrequencyAndPN DMGetSetCellParamValueByPN DMGetSetCellParamValueBySetType DMGetSeviceTestStatus DMGetSingleGPSItem DMGetSortedAllEventIndexList DMGetSourceDatasetHandle DMGetSpecialFieldSerializeMemory DMGetSpecialFieldValidStorageMemory DMGetStructItem DMGetStructItemCount DMGetStructMultiSubItem DMGetStructMultiSubItemCount DMGetStructSubItem DMGetStructSubItemCount DMGetSubTaskCount DMGetSubTaskCount_JobManager DMGetSubTaskInfo DMGetSubTaskInfo_JobManager DMGetTCPIPMonitorDataSoHandle DMGetTestInfoCount DMGetTestingTCPIPMonitorDataSoHandle DMGetTimeZone DMGetTotalPointCountV2 DMGetUTCDateTime DMGetVersion DMGetWalkingEventCount DMGetWalkingEventGPS DMGetWalkingEventPictureInfo DMGetXMLOneStationInfo DMGetXMLStationInfo DMHangUp DMHighRailGetXMLStationCount DMHighRailManualInbound DMHighRailManualOutbound DMHighRailSendOriGPSSpeedInfo DMHighRailSetGPSFillKMLInfosAndStartFill DMHighRailStartFill DMInitConfigDecodeOrStorageProperty DMInitGuids DMInitMOSCalcOnePESQ DMInitPOLQALicense DMInitalAgent DMInitializeReport DMInitialize_JobManager DMIpcConnectRemoteServer DMIpcDisconnectRemoteServer DMIpcRunTest DMIpcSendCommand DMIsDataSetTestingbyDevID DMIsDevcieConnected DMIsDeviceLost DMIsExistDataSetHandle DMIsExistDecodedFile DMIsFiltedDataSet DMIsInGSMState DMIsSchedulePause DMIsSecretFile DMIsServiceWorking DMLoginDongle DMLogoutDongle DMMOSCalcOnePESQ DMMonitoring DMNewSchedule DMNewTask DMNotifyMainFormLoadFinished DMObtainTraceHandle DMOpenATPort DMOpenBinDataSet DMOpenDataSetExV2 DMOpenDataSetV2 DMOpenDataSetWithoutInit DMOpenKPIFile_UnifyKPI DMPauseRcuLog DMPauseSchedule DMPhoneGPSTraceNoData DMPolqaLicenseIsAboutToExpire DMProcAdbOpenMate10Port DMPushCustomEventData DMPushCustomParamValue DMPushDecodeDataA DMPushEventDataA DMQueryKPI_UnifyKPI DMRCUNameToDDIB DMReadATPort DMReadInit DMReadKPIDetail_UnifyKPI DMReadKPIValue_UnifyKPI DMRedecode DMRegistCallBackFunc DMRegistCallBackFuncEx DMRegistCreateDatasetBeforeCallback DMRegistHighRailArrivalsCallback DMRegistHighRailStatusCallback DMRegistServiceInfoCallBack DMRegistTaskRecordEventCallBack DMRegistTaskStartEndCallBack DMRegisterObserverInfo DMRemainExpireDays DMReplayTCPIPMonitorData DMRestoreCancelMarks DMResumRcuLog DMResumeSchedule DMSendIndoorInformation DMSetATUInfo DMSetATUUpload DMSetCurrentLogID DMSetDefaultRcuPath DMSetDeviceConfigs DMSetDeviceRecovery DMSetDynamicParams DMSetIMEI DMSetRandomCheckMark DMSetRcuHeadAndDataTpye DMSetReadIOInterval DMSetRecordFilePath DMSetScannerItemSort DMStartMonitorPlay DMStartRTFillGPSPro DMStartRcuLog DMStartScannerLog DMStartSchedule DMStatParamSingleRangeInfo DMStopMonitorPlay DMStopMos DMStopRcuLog DMStopRedecode DMStopScannerLog DMStopSchedule DMStorageCustomEventFinished DMSuspendSchedule DMSwapRcuFileName DMTranslateToOriginalGPSIndex DMTranslateToOriginalPointIndex DMUnInitalAgent DMUnInitializeReport DMUnInitialize_JobManager DMUninitPOLQALicense DMUpLoadFile DMWaitForSwapDataIsReady DMWriteATPort DMWriteBaseInfo_UnifyKPI DMWriteDelayDetailInfo_UnifyKPI DMWriteEvent DMWriteKPIDetail_UnifyKPI DMWriteKPIValue_UnifyKPI DMWriteLOGInfo_UnifyKPI DMWritePort DMWriteSceneInfo_UnifyKPI DM_InitialEx DM_UnInitial DMftp_dir_connect DMftp_dir_init DMftp_dir_list DMftp_dir_uninit DMget_dir_count DMget_dir_name DMget_file_count DMget_file_name DestroyClient GetConfig GetUploadedSize HaveIndoorMarked InitClient KillSubBTUProcess SendAlarm SendClearAlarm SendEvent SendGps StopUpload UploadData UploadDataRealTime UploadZipData UploadZipDataRealTime

generic

count=1, id=110, productName=VS2005 build 50727, version=50727,

count=10, id=224, productName=VS2013 UPD5 build 40629, version=40629,

count=10, id=199, version=41118,

count=43, id=223, version=20806,

count=2, id=221, productName=VS2013 build 21005, version=21005,

count=2, id=257, productName=VS2019 v16.8.4 build 29336, version=29336,

count=2, id=203, productName=VS2012 UPD1 build 51106, version=51106,

count=144, id=225, version=20806,

count=266, id=224, version=20806,

count=5, id=229, version=21005,

count=11, id=203, version=65501,

count=367, id=1, productName=Unmarked objects,

count=43, id=225, productName=VS2013 build 21005, version=21005,

count=1, id=220, productName=VS2013 build 21005, version=21005,

count=1, id=219, productName=VS2013 build 21005, version=21005,

count=1, id=151,

count=1, id=222, productName=VS2013 build 21005, version=21005,

155c56ab59d1d04617058ec1e60df08a53193c9d1cb4b01be031bb93f12be2e7

kernel32

user32

advapi32

iphlpapi

shell32

hid

setupapi

dhcpcsvc

dhcpcsvc6

psapi

wsock32

nmeagpsdecoder

dinglircu

testmanager

snvm

ole32

generic