269a698960f6ccdb9b0fc048f5d4329b7368337f8a8829092ae7e51e7fbeb598

Sharing

Copy URL Twitter E-mail

General

Target

269a698960f6ccdb9b0fc048f5d4329b7368337f8a8829092ae7e51e7fbeb598
Size

1.9MB
MD5

50df7387a72d7adf1ff3538ef338f210
SHA1

4d37c768014b51762bafa059331ab7e3543c8fca
SHA256

269a698960f6ccdb9b0fc048f5d4329b7368337f8a8829092ae7e51e7fbeb598
SHA512

64d9655320bf0bb2edb4ff10be228d6c6c8e57dc45c529b357a156ffec08f0d4e69feae153cce669957a700591d623ec38d2168e3ff91096aee490fc2c0005a6
SSDEEP

49152:cROZoc49+JBioCNuIWiQGW7Z6+4stfS5q5LRGJCsTvoqxRph:Joc49+JgodIWiQGWrjtfSWLRGJP

Score

1^/10

Malware Config

Signatures

Files

269a698960f6ccdb9b0fc048f5d4329b7368337f8a8829092ae7e51e7fbeb598
.exe windows:6 windows x86 arch:x86

84fb1c3542888fcd8095dc80b79de750

Code Sign

10:f1:b1:ee:2d:25:66:9d:c0:b5:5f:d3:31:6f:d8:11:e3:61:38:08
Certificate

Issuer

O=ZSHIELD INC,L=Beijing,ST=Beijing,C=CN

Not Before

11/10/2023, 11:35

Not After

10/07/2033, 11:35

Subject

O=ZSHIELD INC,L=Beijing,ST=Beijing,C=CN

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ca:60:1b:67:63:e4:1f:b6:54:dd:dd:1c:2b:c8:87:d6:f0:e0:02:2c
Signer

Actual PE Digest

ca:60:1b:67:63:e4:1f:b6:54:dd:dd:1c:2b:c8:87:d6:f0:e0:02:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Code\software\SoftDistributer\Software\FaultDetectorSolution\Release\FaultDetectRunner.pdb

Imports

kernel32

GetVolumeInformationA
DecodePointer
HeapSize
RaiseException
InitializeCriticalSectionEx
HeapReAlloc
GetSystemInfo
GetPrivateProfileStringW
CreateDirectoryW
GetFileAttributesW
VirtualQuery
LocalAlloc
UnmapViewOfFile
OpenFileMappingW
MapViewOfFile
CreateFileMappingW
GetTickCount64
OpenEventW
GetCurrentThreadId
GetCurrentProcess
CreateSemaphoreW
GetStartupInfoW
TerminateProcess
OpenProcess
HeapFree
GetProcessHeap
HeapAlloc
CreateThread
GetModuleFileNameW
LocalFree
FormatMessageW
GlobalFree
GlobalAlloc
GetWindowsDirectoryW
SetEvent
OutputDebugStringA
CreateEventW
GetCurrentProcessId
WaitForSingleObject
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileSize
FlushFileBuffers
GetFileAttributesExW
FreeLibrary
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
OutputDebugStringW
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetLastError
LoadLibraryW
GetModuleHandleW
ReadFile
FindResourceW
LoadResource
LockResource
SizeofResource
Sleep
WriteFile
GetFileSizeEx
SetEndOfFile
SetFilePointerEx
SetEnvironmentVariableA
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
ReadConsoleW
CreateFileW
DeleteFileW
CloseHandle
GetTickCount
GetStdHandle
GetConsoleMode
GlobalSize
GlobalLock
GlobalUnlock
MulDiv
CopyFileW
SetLastError
LoadLibraryExW
EncodePointer
GetSystemDirectoryW
FreeResource
GetModuleHandleA
GlobalDeleteAtom
lstrcmpW
LoadLibraryA
GlobalAddAtomW
GlobalFindAtomW
FindClose
FindFirstFileW
GetVersionExW
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
lstrcmpA
GlobalGetAtomNameW
GetFileTime
GetFullPathNameW
GetVolumeInformationW
LockFile
SetFilePointer
UnlockFile
DuplicateHandle
lstrcmpiW
SetThreadPriority
ResumeThread
CompareStringW
GetLocaleInfoW
GetUserDefaultUILanguage
GlobalFlags
GetCurrentDirectoryW
lstrcpyW
VerSetConditionMask
VerifyVersionInfoW
GetTempFileNameW
GetTempPathW
GetProfileIntW
SearchPathW
VirtualProtect
GetUserDefaultLCID
FindResourceExW
MoveFileExW
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
AreFileApisANSI
ExitThread
GetCommandLineA
RtlUnwind
SetStdHandle
GetFileType
HeapQueryInformation
VirtualAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTimeZoneInformation
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetStringTypeW
GetConsoleCP

user32

SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropW
GetPropW
RemovePropW
AdjustWindowRectEx
ScreenToClient
MapWindowPoints
GetSysColor
CopyRect
EqualRect
PtInRect
GetClassLongW
GetTopWindow
GetLastActivePopup
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
LoadIconW
SetScrollInfo
GetScrollInfo
WinHelpW
MonitorFromWindow
GetMonitorInfoW
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
ClientToScreen
FillRect
GetCursorPos
WindowFromPoint
GetSysColorBrush
LoadCursorW
CharUpperW
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
DestroyMenu
GetMenuItemInfoW
InflateRect
CopyImage
SendDlgItemMessageA
GetMessageW
TranslateMessage
GetActiveWindow
PostQuitMessage
RealChildWindowFromPoint
IntersectRect
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
DestroyIcon
ShowOwnedPopups
SetCursor
DeleteMenu
SetTimer
KillTimer
InvalidateRect
IsIconic
GetNextDlgGroupItem
SetCapture
ReleaseCapture
DrawFocusRect
SetRectEmpty
OffsetRect
IsRectEmpty
LoadImageW
GetCapture
GetIconInfo
MessageBeep
GetAsyncKeyState
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
ScrollWindow
MapVirtualKeyW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
SetWindowRgn
UnionRect
IsMenu
UpdateLayeredWindow
MonitorFromPoint
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetKeyNameTextW
TrackMouseEvent
GetComboBoxInfo
IsZoomed
GetSystemMenu
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetCursorPos
SetRect
SetParent
LockWindowUpdate
SetClassLongW
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
MapDialogRect
DestroyCursor
GetWindowRgn
DrawIcon
GetKeyState
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetDesktopWindow
GetClientRect
GetWindowRect
SystemParametersInfoW
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
RedrawWindow
ValidateRect
SetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenuDefaultItem
GetMenu
PostMessageW
GetWindowThreadProcessId
GetParent
GetWindow
GetMessageTime
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
IsDialogMessageW
SetWindowLongW
GetWindowLongW
GetWindowTextLengthW
SetWindowTextW
IsWindowEnabled
EnableWindow
GetFocus
SetFocus
GetDlgCtrlID
CheckDlgButton
GetDlgItem
MoveWindow
ShowWindow
IsWindow
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
FindWindowA
GetSystemMetrics
GetForegroundWindow
MessageBoxW
SetWindowPos
GetClassNameW
SendMessageW
DrawIconEx
GetMessagePos
GetWindowTextW

gdi32

SetTextAlign
SetROP2
MoveToEx
TextOutW
ExtTextOutW
SetPolyFillMode
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetTextExtentPoint32W
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
CreatePalette
GetLayout
SetLayout
SetMapMode
SetBkMode
GetTextFaceW
CreateFontIndirectW
GetObjectW
CreateCompatibleDC
CreatePen
DeleteDC
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreateHatchBrush
CreateBitmap
BitBlt
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCW
CopyMetaFileW
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
SetViewportExtEx
GetBkColor
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
GetBoundsRect
FillRgn
SetPaletteEntries
ExtFloodFill
SetPixelV
PtInRegion
FrameRgn
RoundRect
CreateRoundRectRgn
OffsetRgn
GetRgnBox
EnumFontFamiliesExW
Rectangle
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
CreateCompatibleBitmap
GetNearestPaletteIndex

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
LookupAccountSidW
GetTokenInformation
OpenProcessToken
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileW
SHAppBarMessage
DragFinish
ShellExecuteW
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoUninitialize
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
CreateStreamOnHGlobal
CoDisconnectObject
CoTaskMemFree
CoTaskMemAlloc
ReleaseStgMedium
OleDuplicateData
CoInitialize
CoInitializeEx
CoCreateInstance

oleaut32

VariantClear
VariantChangeType
LoadTypeLi
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
SysAllocString
VariantCopy
VarBstrFromDate
VariantInit
SysStringLen
SysFreeString

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW
StrFormatKBSizeW

uxtheme

GetThemePartSize
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText

gdiplus

GdiplusShutdown
GdipFree
GdiplusStartup
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipAlloc

wtsapi32

WTSFreeMemory
WTSEnumerateProcessesW

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 355KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84fb1c3542888fcd8095dc80b79de750

Code Sign

10:f1:b1:ee:2d:25:66:9d:c0:b5:5f:d3:31:6f:d8:11:e3:61:38:08Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

ca:60:1b:67:63:e4:1f:b6:54:dd:dd:1c:2b:c8:87:d6:f0:e0:02:2cSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msimg32

shlwapi

uxtheme

gdiplus

wtsapi32

oleacc

imm32

winmm

winspool.drv

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 355KB - Virtual size: 355KB

.data Size: 26KB - Virtual size: 57KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 121KB - Virtual size: 120KB

10:f1:b1:ee:2d:25:66:9d:c0:b5:5f:d3:31:6f:d8:11:e3:61:38:08
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

ca:60:1b:67:63:e4:1f:b6:54:dd:dd:1c:2b:c8:87:d6:f0:e0:02:2c
Signer

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 355KB - Virtual size: 355KB

.data
Size: 26KB - Virtual size: 57KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 121KB - Virtual size: 120KB