424317b76d941cb1921616c7d62fbbdb

Sharing

Copy URL Twitter E-mail

General

Target

424317b76d941cb1921616c7d62fbbdb
Size

220KB
MD5

424317b76d941cb1921616c7d62fbbdb
SHA1

2945af2ede6d1e74455612943af1fdbced303b8a
SHA256

a8dfbca203052687ff4271f68d5189efb662b6986b5b85c31fbb6265cc21598c
SHA512

15dc73a0e7b5e77fa339b1d3190fca28387cfbc2ca9fff6f72315048f0620da816dad513c0029c8686f159ac0c99ccb16f67df1d71f5ae3f60963226a3454647
SSDEEP

3072:h8TIP9+9YLtPaTbjsItxBa+QV4nZQSFE9iKAEnlk5/p40N3xBa+QV4JZQRjJU:AIP9+9YLtPaTbjdtrZQWpvRlZQ4

Score

1^/10

Malware Config

Signatures

Files

424317b76d941cb1921616c7d62fbbdb
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

53:fa:35:77:c4:ce:87:2b:a3:c8:e8:d8:4c:93:43:33
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Not Before

22/01/2016, 06:21

Not After

22/04/2018, 06:21

Subject

CN=YAMICSOFT TECHNOLOGY LIMITED,O=YAMICSOFT TECHNOLOGY LIMITED,L=Hong Kong,ST=Hong Kong,C=CN,1.2.840.113549.1.9.1=#0c15636f6e746163744079616d6963736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/11/2014, 00:58

Not After

08/11/2029, 00:58

Subject

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

af:63:06:ab:69:aa:d6:0b:4f:cc:7a:26:da:67:c7:0c:a3:7b:02:d5
Signer

Actual PE Digest

af:63:06:ab:69:aa:d6:0b:4f:cc:7a:26:da:67:c7:0c:a3:7b:02:d5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

53:fa:35:77:c4:ce:87:2b:a3:c8:e8:d8:4c:93:43:33Certificate

Extended Key Usages

Key Usages

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4cCertificate

Extended Key Usages

Key Usages

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54Certificate

Extended Key Usages

Key Usages

af:63:06:ab:69:aa:d6:0b:4f:cc:7a:26:da:67:c7:0c:a3:7b:02:d5Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 158KB - Virtual size: 157KB

.reloc Size: 512B - Virtual size: 12B

.rsrc Size: 56KB - Virtual size: 55KB

53:fa:35:77:c4:ce:87:2b:a3:c8:e8:d8:4c:93:43:33
Certificate

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

af:63:06:ab:69:aa:d6:0b:4f:cc:7a:26:da:67:c7:0c:a3:7b:02:d5
Signer

.text
Size: 158KB - Virtual size: 157KB

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 56KB - Virtual size: 55KB