1392dd4b6d149dc7aeacc49e40c7bf33[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

1392dd4b6d149dc7aeacc49e40c7bf33.bin
Size

751KB
MD5

1392dd4b6d149dc7aeacc49e40c7bf33
SHA1

c1770c199699a78e47c95739b6eef5d4bdaf7f85
SHA256

581209c857561e3049b65a8bf809d2c1eef121033ebd2e9d0e491416f4796e8a
SHA512

d3c97332f3fa65e6cf478fc483e1d088cd3dde05a49e11a3caecfd29d8c9838c300a74e6f0af6c22edf7197f53fed26529e47ea2fded780ef0b869655cf736bb
SSDEEP

12288:ERyTSktU4g/n/t0EW5A0zyYvJwQ5oAlK+Gj4vebIk6bQQ52LgRg08y5HpnkzE+:oStU4gf2EW5A2DJr/kl4vGIk6v3H4l

Score

1^/10

Malware Config

Signatures

Files

1392dd4b6d149dc7aeacc49e40c7bf33.bin
.exe windows:4 windows x86 arch:x86

Code Sign

d8:95:f7:d2:be:14:72:35
Certificate

Issuer

CN=Tenpay.com Root CA,OU=Tenpay.com CA Center,O=tenpay.com,L=SHENZHEN,ST=GUANGDONG,C=CN,1.2.840.113549.1.9.1=#0c13736572766963654074656e63656e742e636f6d

Not Before

31/10/2007, 07:32

Not After

28/10/2017, 07:32

Subject

CN=Tenpay.com Root CA,OU=Tenpay.com CA Center,O=tenpay.com,L=SHENZHEN,ST=GUANGDONG,C=CN,1.2.840.113549.1.9.1=#0c13736572766963654074656e63656e742e636f6d

01:fa:d8:5e
Certificate

Issuer

CN=Tenpay.com Root CA,OU=Tenpay.com CA Center,O=tenpay.com,L=SHENZHEN,ST=GUANGDONG,C=CN,1.2.840.113549.1.9.1=#0c13736572766963654074656e63656e742e636f6d

Not Before

27/03/2011, 05:42

Not After

26/03/2012, 05:42

Subject

CN=邓永行,OU=CA Center,O=tenpay.com,L=家,ST=XX,C=China,1.2.840.113549.1.9.1=#13025858,2.5.4.12=#13025858,2.5.4.42=#13025858,2.5.4.4=#1309323132303733383237

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageKeyEncipherment
KeyUsageKeyAgreement

c0:bb:73:2a:ca:52:97:46:c2:2c:18:10:69:59:d8:74:68:22:2d:12
Signer

Actual PE Digest

c0:bb:73:2a:ca:52:97:46:c2:2c:18:10:69:59:d8:74:68:22:2d:12

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.deng
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

d8:95:f7:d2:be:14:72:35Certificate

01:fa:d8:5eCertificate

Key Usages

c0:bb:73:2a:ca:52:97:46:c2:2c:18:10:69:59:d8:74:68:22:2d:12Signer

Headers

File Characteristics

Sections

CODE Size: 644KB - Virtual size: 644KB

DATA Size: 11KB - Virtual size: 10KB

BSS Size: - Virtual size: 7KB

.idata Size: 13KB - Virtual size: 12KB

.tls Size: - Virtual size: 20B

.rdata Size: 512B - Virtual size: 35B

.reloc Size: 41KB - Virtual size: 40KB

.rsrc Size: 33KB - Virtual size: 33KB

.deng Size: 4KB - Virtual size: 4KB

d8:95:f7:d2:be:14:72:35
Certificate

01:fa:d8:5e
Certificate

c0:bb:73:2a:ca:52:97:46:c2:2c:18:10:69:59:d8:74:68:22:2d:12
Signer

CODE
Size: 644KB - Virtual size: 644KB

DATA
Size: 11KB - Virtual size: 10KB

BSS
Size: - Virtual size: 7KB

.idata
Size: 13KB - Virtual size: 12KB

.tls
Size: - Virtual size: 20B

.rdata
Size: 512B - Virtual size: 35B

.reloc
Size: 41KB - Virtual size: 40KB

.rsrc
Size: 33KB - Virtual size: 33KB

.deng
Size: 4KB - Virtual size: 4KB