General

Malware Config

Signatures

Files

• 4b262578a96de8cc127711056ae5b214493586e128bb2368007f2f416d0de452

  .exe windows:4 windows x86 arch:x86

  1a0aa2ddc09ff7b2d425012d15cb041d

  
  

  Code Sign

  68:74:d5:73:9f:92:ca:76:b9:c0:8f:b8:b3:c1:d7:a1

  Certificate

  Issuer

  CN=台州市祥电科技有限公司,C=China

  Not Before

  09-04-2022 06:22

  Not After

  30-12-2099 16:00

  Subject

  CN=台州市祥电科技有限公司,C=China

  0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  21-09-2022 00:00

  Not After

  21-11-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  68:74:d5:73:9f:92:ca:76:b9:c0:8f:b8:b3:c1:d7:a1

  Certificate

  Issuer

  CN=台州市祥电科技有限公司,C=China

  Not Before

  09-04-2022 06:22

  Not After

  30-12-2099 16:00

  Subject

  CN=台州市祥电科技有限公司,C=China

  0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  21-09-2022 00:00

  Not After

  21-11-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  27:d9:0b:98:78:51:c1:88:43:c1:3b:cd:18:7d:94:36:22:51:03:84:3c:65:77:bd:96:e1:6c:eb:58:a9:17:74

  Signer

  Actual PE Digest

  27:d9:0b:98:78:51:c1:88:43:c1:3b:cd:18:7d:94:36:22:51:03:84:3c:65:77:bd:96:e1:6c:eb:58:a9:17:74

  Digest Algorithm

  sha256

  PE Digest Matches

  false

  dd:d6:5a:eb:76:35:a9:3b:ff:be:3d:db:a1:51:ea:8a:a3:4e:77:d9

  Signer

  Actual PE Digest

  dd:d6:5a:eb:76:35:a9:3b:ff:be:3d:db:a1:51:ea:8a:a3:4e:77:d9

  Digest Algorithm

  sha1

  PE Digest Matches

  false

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  kernel32

  GetModuleHandleA

  GetProcAddress

  winmm

  waveOutOpen

  ws2_32

  WSACleanup

  version

  VerQueryValueA

  user32

  GetDC

  gdi32

  Pie

  winspool.drv

  OpenPrinterA

  advapi32

  RegCloseKey

  shell32

  DragFinish

  ole32

  OleRun

  oleaut32

  UnRegisterTypeLi

  comctl32

  ord17

  comdlg32

  ChooseFontA

  Sections

  .MPRESS1

  Size: 15.6MB - Virtual size: 42.5MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .MPRESS2

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 103KB - Virtual size: 102KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE