b14abe08a2832f46180c45b492d6a8b250de57608c294963c64b11a589509430

Sharing

Copy URL Twitter E-mail

General

Target

b14abe08a2832f46180c45b492d6a8b250de57608c294963c64b11a589509430
Size

131KB
MD5

1d3d02cb12e88b9ff83a0691661220fe
SHA1

2ac5f6cad913fbf192610756ef5b1e0086b32f08
SHA256

b14abe08a2832f46180c45b492d6a8b250de57608c294963c64b11a589509430
SHA512

021185957a4676b1c982e7cb3e2987e89d44df5abd6e229dca2d7a3461e36cafafc2c897e6db38aa3b113e46154a09aa1136aaafa505e6b9e17ffd85286513e0
SSDEEP

3072:mZUEvG2aFHCvxNUOi4uVZzcMqqDLy/Xx6c9HGN55CxtF8:mdvgFiUO1uVZrqqDLuXxXG5Cxb8

Score

1^/10

Malware Config

Signatures

Files

b14abe08a2832f46180c45b492d6a8b250de57608c294963c64b11a589509430
.dll windows:5 windows x64 arch:x64

289ae3e5b60e8c337edfcdf8abdb632c

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:11:64:60:45:46:5c:e6:20:8a:69:61:b2:15:15:2d
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

03/02/2023, 00:00

Not After

02/02/2026, 23:59

Subject

SERIALNUMBER=91110108747514552K,CN=Beijing Haitai Fangyuan Technologies Co.\, Ltd.,O=Beijing Haitai Fangyuan Technologies Co.\, Ltd.,ST=北京市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e6b5b7e6b780e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e58c97e4baace5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f7:03:79:28:21:01:50:8d:36:5f:1c:4e:97:74:9e:3c:e6:36:c6:3b:1f:1e:a5:a3:99:25:34:5c:70:61:25:89
Signer

Actual PE Digest

f7:03:79:28:21:01:50:8d:36:5f:1c:4e:97:74:9e:3c:e6:36:c6:3b:1f:1e:a5:a3:99:25:34:5c:70:61:25:89

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

crypt32

CertFreeCertificateContext
CryptAcquireCertificatePrivateKey
CertEnumCertificatesInStore
PFXImportCertStore
CertCloseStore

rpcrt4

RpcStringFreeA
UuidCreate
UuidToStringA

kernel32

WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
DisableThreadLibraryCalls
MultiByteToWideChar
GetVersion
GetLastError
HeapFree
CloseHandle
CreateFileA
GetModuleFileNameA
GetProcAddress
LoadLibraryExA
FreeLibrary
GetPrivateProfileStringA
FlushFileBuffers
HeapAlloc
SetUnhandledExceptionFilter
RtlLookupFunctionEntry
RtlUnwindEx
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
RaiseException
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
HeapSetInformation
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
WideCharToMultiByte
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
HeapReAlloc

advapi32

CryptReleaseContext
CryptGetUserKey
CryptExportKey
CryptDestroyKey

Exports

Exports

HSBeginTransaction
HSChangeSOPin
HSChangeUserPin
HSClearPin
HSConnectDev
HSCreateContainer
HSCreateFile
HSDESCbc
HSDESEcb
HSDelContainer
HSDeleteFile
HSDisconnectDev
HSEndTransaction
HSErase
HSEraseEx
HSEraseInitWithPsamKey
HSExportRSAPubKey
HSFormat
HSFormatEx
HSFormatSec
HSGenHuaXiaSoPin
HSGenRSA
HSGenRandom
HSGetCid
HSGetContainerName
HSGetContainerNum
HSGetContainerParam
HSGetDevState
HSGetFileRight
HSGetFileSize
HSGetFreeSize
HSGetHWApp
HSGetSOPinRetryNum
HSGetSOPinRetryNumEx
HSGetSerial
HSGetTimepiece
HSGetTotalSize
HSGetUserPinRetryNum
HSGetUserPinRetryNumEx
HSHasFileExist
HSImportP12Cert
HSImportRSA
HSListContainers
HSListReaders
HSMD5
HSPcodeDetect
HSRSADecrypt
HSRSAEncrypt
HSRSASign
HSRSAVerify
HSReWriteUserPin
HSReadCert
HSReadFile
HSReadLabel
HSSCB2Cbc
HSSCB2SetKey
HSSHA1
HSSetDevChgEvent
HSSetDevChgEventParam
HSSymEcb
HSSymSessionEcb
HSUnlockHuaxiaUsrPinWithSoPin
HSVerifySOPin
HSVerifyUserPin
HSWriteCert
HSWriteFile
HSWriteKey
HSWriteLabel

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

289ae3e5b60e8c337edfcdf8abdb632c

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0f:11:64:60:45:46:5c:e6:20:8a:69:61:b2:15:15:2dCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

f7:03:79:28:21:01:50:8d:36:5f:1c:4e:97:74:9e:3c:e6:36:c6:3b:1f:1e:a5:a3:99:25:34:5c:70:61:25:89Signer

Headers

File Characteristics

Imports

crypt32

rpcrt4

kernel32

advapi32

Exports

Exports

Sections

.text Size: 74KB - Virtual size: 74KB

.rdata Size: 33KB - Virtual size: 32KB

.data Size: 6KB - Virtual size: 32KB

.pdata Size: 4KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 984B

.reloc Size: 1KB - Virtual size: 1KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0f:11:64:60:45:46:5c:e6:20:8a:69:61:b2:15:15:2d
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

f7:03:79:28:21:01:50:8d:36:5f:1c:4e:97:74:9e:3c:e6:36:c6:3b:1f:1e:a5:a3:99:25:34:5c:70:61:25:89
Signer

.text
Size: 74KB - Virtual size: 74KB

.rdata
Size: 33KB - Virtual size: 32KB

.data
Size: 6KB - Virtual size: 32KB

.pdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 1KB - Virtual size: 1KB