7cf92f6c71e3e5e9e08dd98a4fec487926771b559cb9f9c46b13253211441ec9[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

7cf92f6c71e3e5e9e08dd98a4fec487926771b559cb9f9c46b13253211441ec9.exe
Size

440KB
MD5

3761143f4f3cde1905c133bbeb591f67
SHA1

8d7f285c8e68a3b1ab13212dac0fc01e67ec8d8d
SHA256

7cf92f6c71e3e5e9e08dd98a4fec487926771b559cb9f9c46b13253211441ec9
SHA512

f57ee9becd00d10f1ef67f50ec54febd8c8ea84528b0b9d3ae435756f2007e3f2ab12fafd81a79e54f48aee6bdef817abfa67d7174d32170baa6f6926fb69458
SSDEEP

12288:8Tr0FEbQ3ohNw+yHOQ7kvrF3qw0fwzBB3ea3dZ6:8TOuQ3h+ypw1tdZ6

Score

1^/10

Malware Config

Signatures

Files

7cf92f6c71e3e5e9e08dd98a4fec487926771b559cb9f9c46b13253211441ec9.exe
.exe windows:5 windows x86 arch:x86

1d48bdfea090b43d57e0f763b7b45142

Code Sign

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3f:f7:0c:fb:93:5b:5b:71:36:dc:06:4b:c3:20:ea:f7
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

22/03/2023, 00:00

Not After

21/03/2026, 23:59

Subject

CN=周伟,O=周伟,ST=湖南省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

89:06:88:9d:46:04:18:90:cb:2d:ad:df:33:9c:40:11:f5:57:56:23
Signer

Actual PE Digest

89:06:88:9d:46:04:18:90:cb:2d:ad:df:33:9c:40:11:f5:57:56:23

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\临时存放\2024年C++学习源码9-1】\COPY\Copy【新版-动态调用】\Release\ENP.pdb

Imports

wininet

InternetReadFile
InternetSetOptionW

kernel32

CreateFileW
GlobalLock
GlobalUnlock
GlobalAlloc
CreateMutexW
GetLastError
CloseHandle
GetComputerNameA
QueryPerformanceCounter
Sleep
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetCPInfo
WideCharToMultiByte
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
SetEvent
GetThreadTimes
FreeLibrary
LoadLibraryExW
RtlUnwind
RaiseException
HeapAlloc
GetModuleHandleExW
HeapReAlloc
HeapFree
GetStdHandle
WriteFile
GetModuleFileNameA
ExitProcess
GetCommandLineA
GetCommandLineW
GetACP
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
HeapSize
WriteConsoleW

Sections

.text
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d48bdfea090b43d57e0f763b7b45142

Code Sign

01Certificate

Key Usages

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

3f:f7:0c:fb:93:5b:5b:71:36:dc:06:4b:c3:20:ea:f7Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

89:06:88:9d:46:04:18:90:cb:2d:ad:df:33:9c:40:11:f5:57:56:23Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

wininet

kernel32

Sections

.text Size: 142KB - Virtual size: 141KB

.rdata Size: 61KB - Virtual size: 60KB

.data Size: 3KB - Virtual size: 7KB

.rsrc Size: 212KB - Virtual size: 212KB

.reloc Size: 9KB - Virtual size: 8KB

01
Certificate

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

3f:f7:0c:fb:93:5b:5b:71:36:dc:06:4b:c3:20:ea:f7
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

89:06:88:9d:46:04:18:90:cb:2d:ad:df:33:9c:40:11:f5:57:56:23
Signer

.text
Size: 142KB - Virtual size: 141KB

.rdata
Size: 61KB - Virtual size: 60KB

.data
Size: 3KB - Virtual size: 7KB

.rsrc
Size: 212KB - Virtual size: 212KB

.reloc
Size: 9KB - Virtual size: 8KB