874445f2a0c484fc01ec9b199ffec6700ac7e9997741fb20295f6691c414ce4b

Sharing

Copy URL Twitter E-mail

General

Target

874445f2a0c484fc01ec9b199ffec6700ac7e9997741fb20295f6691c414ce4b
Size

4.6MB
MD5

af2100b590cb3edbfcbf5bf1bce7de8e
SHA1

9b9d2950ab4acc38b8fd94218e620d02a255a743
SHA256

874445f2a0c484fc01ec9b199ffec6700ac7e9997741fb20295f6691c414ce4b
SHA512

e5dbaa4125b7992590a7ddf57356fc79df5377022d3fea682e35563b228040d1e7f1d061dea788044ef74b7b5e0a4c4f56737eb2706468c2a91ba62863842626
SSDEEP

98304:OtGFCCtog/sK6iUj9Md8QB+47e9hBqXWB2i6r7IzTnELe5QqUo:vCgoPXBMd8DnBqm7IUzTnEMQE

Score

1^/10

Malware Config

Signatures

Files

874445f2a0c484fc01ec9b199ffec6700ac7e9997741fb20295f6691c414ce4b
.dll windows:6 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19/09/2018, 00:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:7b:a0:df:71:75:cf:09:f0:d2:f4:1c
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

29/12/2020, 07:50

Not After

30/12/2023, 07:50

Subject

SERIALNUMBER=91341600MA2MXAHD26,CN=安徽省刀锋网络科技有限公司,O=安徽省刀锋网络科技有限公司,STREET=谯城区和平西路南侧亳州青年创客空间2号楼,L=亳州,ST=安徽,C=CN,1.3.6.1.4.1.311.60.2.1.1=#1306424f5a484f55,1.3.6.1.4.1.311.60.2.1.2=#1305414e485549,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19/09/2018, 00:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1f:7b:a0:df:71:75:cf:09:f0:d2:f4:1c
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

29/12/2020, 07:50

Not After

30/12/2023, 07:50

Subject

SERIALNUMBER=91341600MA2MXAHD26,CN=安徽省刀锋网络科技有限公司,O=安徽省刀锋网络科技有限公司,STREET=谯城区和平西路南侧亳州青年创客空间2号楼,L=亳州,ST=安徽,C=CN,1.3.6.1.4.1.311.60.2.1.1=#1306424f5a484f55,1.3.6.1.4.1.311.60.2.1.2=#1305414e485549,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

27/05/2021, 09:55

Not After

28/06/2032, 09:55

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

20/02/2019, 00:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7a:cb:11:9c:91:8c:bb:72:75:4d:7b:ca:2f:6d:64:0a:b9:d5:ee:96:a1:81:66:a6:66:93:e0:73:f4:50:83:ad
Signer

Actual PE Digest

7a:cb:11:9c:91:8c:bb:72:75:4d:7b:ca:2f:6d:64:0a:b9:d5:ee:96:a1:81:66:a6:66:93:e0:73:f4:50:83:ad

Digest Algorithm

sha256

PE Digest Matches

true

ea:dd:bd:e5:5e:85:f1:1b:7a:6d:ee:85:4c:52:ab:35:01:69:6d:1d
Signer

Actual PE Digest

ea:dd:bd:e5:5e:85:f1:1b:7a:6d:ee:85:4c:52:ab:35:01:69:6d:1d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Exports

Exports

dllAttach
dllDetach

Sections

Size: 2.4MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 670KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

djmstoys
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uhacnagp
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

baa93d47220682c04d92f7797d9224ce

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6aCertificate

Key Usages

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0fCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

1f:7b:a0:df:71:75:cf:09:f0:d2:f4:1cCertificate

Extended Key Usages

Key Usages

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6aCertificate

Key Usages

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0fCertificate

Extended Key Usages

Key Usages

1f:7b:a0:df:71:75:cf:09:f0:d2:f4:1cCertificate

Extended Key Usages

Key Usages

01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9fCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fcCertificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

7a:cb:11:9c:91:8c:bb:72:75:4d:7b:ca:2f:6d:64:0a:b9:d5:ee:96:a1:81:66:a6:66:93:e0:73:f4:50:83:adSigner

ea:dd:bd:e5:5e:85:f1:1b:7a:6d:ee:85:4c:52:ab:35:01:69:6d:1dSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comctl32

Exports

Exports

Sections

Size: 2.4MB - Virtual size: 6.3MB

.rsrc Size: 670KB - Virtual size: 1.1MB

.idata Size: 512B - Virtual size: 4KB

Size: 512B - Virtual size: 3.5MB

djmstoys Size: 1.5MB - Virtual size: 1.5MB

uhacnagp Size: 512B - Virtual size: 4KB

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

1f:7b:a0:df:71:75:cf:09:f0:d2:f4:1c
Certificate

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

1f:7b:a0:df:71:75:cf:09:f0:d2:f4:1c
Certificate

01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

7a:cb:11:9c:91:8c:bb:72:75:4d:7b:ca:2f:6d:64:0a:b9:d5:ee:96:a1:81:66:a6:66:93:e0:73:f4:50:83:ad
Signer

ea:dd:bd:e5:5e:85:f1:1b:7a:6d:ee:85:4c:52:ab:35:01:69:6d:1d
Signer

.rsrc
Size: 670KB - Virtual size: 1.1MB

.idata
Size: 512B - Virtual size: 4KB

djmstoys
Size: 1.5MB - Virtual size: 1.5MB

uhacnagp
Size: 512B - Virtual size: 4KB