78941aaa7a304905225216f6c62d56f7d58c4e592c79064eee4fb5fb3fbcabd9

Sharing

Copy URL Twitter E-mail

General

Target

78941aaa7a304905225216f6c62d56f7d58c4e592c79064eee4fb5fb3fbcabd9
Size

853KB
MD5

86f27273380c8c5f983545ba30190f20
SHA1

95649ec93e2d84d92fffbfa13a9526f1c120d982
SHA256

78941aaa7a304905225216f6c62d56f7d58c4e592c79064eee4fb5fb3fbcabd9
SHA512

42ec02f0220d21348a84c632632b37f9dfc340b09b2be325c86686643a614b4b205613d9fdf6fcd04a5f7a76fe04d31492cb302df762bf002285a57a44f6bb39
SSDEEP

12288:Wr42g3xJwBthtJfIioxArlA49x7Ghkr+pZ6ZcAki2IChZ4HdtBv6Sfdfv:z2gofNDACSY+pZ6Zc7i2Db+t4udn

Score

1^/10

Malware Config

Signatures

Files

78941aaa7a304905225216f6c62d56f7d58c4e592c79064eee4fb5fb3fbcabd9
.exe windows:5 windows x86 arch:x86

27c4c4c7536d8bede4aafafc793538eb

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:bb:73:ea:02:c7:00:da:07:70:da:7b:63:d9:04:51
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/07/2020, 00:00

Not After

26/08/2021, 12:00

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:90:b9:34:84:e6:f1:8e:fe:9f:43:68:3a:5f:49:d8
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25/05/2021, 00:00

Not After

21/08/2024, 23:59

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a7:74:5d:a5:5b:78:fe:a7:bf:a2:df:71:36:3e:4c:9d:c0:c5:13:ba:1d:c7:72:e4:f6:fc:ac:e6:f0:a3:ca:83
Signer

Actual PE Digest

a7:74:5d:a5:5b:78:fe:a7:bf:a2:df:71:36:3e:4c:9d:c0:c5:13:ba:1d:c7:72:e4:f6:fc:ac:e6:f0:a3:ca:83

Digest Algorithm

sha256

PE Digest Matches

false

20:a9:56:91:c7:98:bd:d9:cd:29:d5:ac:9d:a5:23:e5:47:e0:5c:0b
Signer

Actual PE Digest

20:a9:56:91:c7:98:bd:d9:cd:29:d5:ac:9d:a5:23:e5:47:e0:5c:0b

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\project\se\branches\11.0.1_Eaton\bin\Release\SCMainFrame.pdb

Imports

kernel32

ExpandEnvironmentStringsW
CreateThread
GetSystemDirectoryA
LoadLibraryExA
GetModuleHandleW
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetProcessHeap
GetCurrentProcessId
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
GetConsoleCP
FlushFileBuffers
GetFileSizeEx
GetStringTypeW
SetStdHandle
CloseHandle
HeapReAlloc
GetLastError
HeapSize
OpenProcess
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
HeapFree
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
GetProcAddress
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
DuplicateHandle
LoadLibraryW
GlobalAlloc
GlobalFree
FindResourceW
SizeofResource
LockResource
LoadResource
CreateFileW
GetFileSize
ReadFile
FindFirstFileW
FindClose
GetSystemDirectoryW
FindNextFileW
WriteFile
GetVersionExW
QueryPerformanceCounter
InterlockedIncrement
LoadLibraryExW
InitializeCriticalSection
InterlockedExchange
MulDiv
MultiByteToWideChar
WideCharToMultiByte
DebugBreak
QueryPerformanceFrequency
OutputDebugStringW
CreateEventW
WaitForSingleObject
TerminateProcess
SetUnhandledExceptionFilter
GetModuleFileNameW
GetModuleHandleExW
CreateProcessW
IsDebuggerPresent
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetStartupInfoW
RtlUnwind
GetStdHandle
GetFileType
WriteConsoleW
ExitProcess
SetFilePointerEx
GetConsoleMode
FindFirstFileExW
IsValidCodePage
GetACP

user32

IsWindowEnabled
RegisterWindowMessageW
SetWindowLongW
UnregisterClassW
SendMessageW
CallWindowProcW
DefWindowProcW
GetWindowThreadProcessId
GetWindowLongW
FindWindowExW
GetShellWindow
EnumThreadWindows
EqualRect
OffsetRect
PostQuitMessage
SystemParametersInfoW
DrawFocusRect
GetDC
GetKeyState
ScreenToClient
GetSysColor
GetFocus
GetForegroundWindow
SetFocus
SetCapture
ReleaseCapture
TrackMouseEvent
InvalidateRect
RedrawWindow
GetCapture
SetRectEmpty
BeginPaint
EndPaint
IntersectRect
GetWindowRect
PtInRect
UnionRect
ClientToScreen
SetCursor
GetSystemMetrics
DrawEdge
TrackPopupMenuEx
InsertMenuW
CreatePopupMenu
DestroyMenu
SetTimer
FindWindowW
KillTimer
GetMessageW
DispatchMessageW
PeekMessageW
TranslateMessage
PostMessageW
DestroyWindow
IsWindowVisible
CreateWindowExW
SetWindowTextW
RegisterClassExW
WindowFromPoint
ShowWindow
IsWindow
GetAsyncKeyState
CopyRect
IsRectEmpty
SetPropW
LoadCursorW
GetClientRect
UpdateLayeredWindow
GetDesktopWindow
GetClassInfoExW
ReleaseDC
GetCursorPos

gdi32

ExtTextOutW
CreateFontW
CreateCompatibleBitmap
SelectObject
CreateDIBSection
CreateCompatibleDC
DeleteDC
DeleteObject
GetDIBits
GetObjectW
GdiFlush
BitBlt
StretchBlt
RestoreDC
SaveDC
GetTextMetricsW
GetTextExtentExPointW
CreateRectRgn
GetClipRgn
SelectClipRgn
SetBkMode
CreateFontIndirectW
GetStockObject
ExtSelectClipRgn
CreateRectRgnIndirect
GetDeviceCaps
SetTextColor
SetBkColor
GetViewportOrgEx
GetTextColor
GetCurrentObject
SetViewportOrgEx
GetTextExtentPoint32W

Sections

.text
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 333KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

27c4c4c7536d8bede4aafafc793538eb

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

06:bb:73:ea:02:c7:00:da:07:70:da:7b:63:d9:04:51Certificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

08:90:b9:34:84:e6:f1:8e:fe:9f:43:68:3a:5f:49:d8Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

a7:74:5d:a5:5b:78:fe:a7:bf:a2:df:71:36:3e:4c:9d:c0:c5:13:ba:1d:c7:72:e4:f6:fc:ac:e6:f0:a3:ca:83Signer

20:a9:56:91:c7:98:bd:d9:cd:29:d5:ac:9d:a5:23:e5:47:e0:5c:0bSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

Sections

.text Size: 257KB - Virtual size: 256KB

.rdata Size: 95KB - Virtual size: 94KB

.data Size: 23KB - Virtual size: 30KB

.didat Size: 512B - Virtual size: 232B

.rsrc Size: 333KB - Virtual size: 332KB

Size: 143KB - Virtual size: 143KB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

06:bb:73:ea:02:c7:00:da:07:70:da:7b:63:d9:04:51
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

08:90:b9:34:84:e6:f1:8e:fe:9f:43:68:3a:5f:49:d8
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

a7:74:5d:a5:5b:78:fe:a7:bf:a2:df:71:36:3e:4c:9d:c0:c5:13:ba:1d:c7:72:e4:f6:fc:ac:e6:f0:a3:ca:83
Signer

20:a9:56:91:c7:98:bd:d9:cd:29:d5:ac:9d:a5:23:e5:47:e0:5c:0b
Signer

.text
Size: 257KB - Virtual size: 256KB

.rdata
Size: 95KB - Virtual size: 94KB

.data
Size: 23KB - Virtual size: 30KB

.didat
Size: 512B - Virtual size: 232B

.rsrc
Size: 333KB - Virtual size: 332KB