60a14c77d554b8fe95171c3d5d897fb0bfec1d09b1bcc975f7088f6341ecbe03

Sharing

Copy URL

Twitter E-mail

General

Target

60a14c77d554b8fe95171c3d5d897fb0bfec1d09b1bcc975f7088f6341ecbe03
Size

861KB
MD5

ed6833ce7eee0c04698862f413344481
SHA1

f2dbc33a402940788576b96e11c0aef01c0f3283
SHA256

60a14c77d554b8fe95171c3d5d897fb0bfec1d09b1bcc975f7088f6341ecbe03
SHA512

5a47acee6c1d91b49e521880bc7dc40ebc91450b5f899432c32c9779d0a85f15b6aa1601783bd1a1dcd289f400abac48fe78c713ff3807f6c8fc93efffad9ea9
SSDEEP

12288:VqFcULbbGlN+sPIfzvE5eMzQ3Aj3aqv2xORxPSH0kbAPPA5BjvrEH7N:KLbzokE6Aj33Rx0AQnrEH7N

Score

1^/10

Malware Config

Signatures

Files

60a14c77d554b8fe95171c3d5d897fb0bfec1d09b1bcc975f7088f6341ecbe03
.exe windows:4 windows x86 arch:x86

9132adaf0f762071751e0cb4d9095c12

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15-06-2016 00:00

Not After

15-06-2024 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

3a:82:68:4e:fe:a6:53:db:3c:8d:5e:bb
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

08-01-2020 01:35

Not After

23-03-2022 10:13

Subject

CN=KINGSOFT JAPAN\, INC.,OU=Administration Division,O=KINGSOFT JAPAN\, INC.,L=Minato-ku,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c14636f64657369676e406b696e67736f66742e6a70

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15-06-2016 00:00

Not After

15-06-2024 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3a:82:68:4e:fe:a6:53:db:3c:8d:5e:bb
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

08-01-2020 01:35

Not After

23-03-2022 10:13

Subject

CN=KINGSOFT JAPAN\, INC.,OU=Administration Division,O=KINGSOFT JAPAN\, INC.,L=Minato-ku,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c14636f64657369676e406b696e67736f66742e6a70

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

95:e9:cf:9d:ea:2a:93:a0:87:56:9c:82:3a:8a:56:05:d0:cb:b3:ae:d1:74:13:ec:a4:0d:11:6d:de:83:ba:69
Signer

Actual PE Digest

95:e9:cf:9d:ea:2a:93:a0:87:56:9c:82:3a:8a:56:05:d0:cb:b3:ae:d1:74:13:ec:a4:0d:11:6d:de:83:ba:69

Digest Algorithm

sha256

PE Digest Matches

false

31:ed:e4:44:c6:ed:7e:b5:64:e0:ce:43:78:22:8f:6e:be:d0:8f:c3
Signer

Actual PE Digest

31:ed:e4:44:c6:ed:7e:b5:64:e0:ce:43:78:22:8f:6e:be:d0:8f:c3

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
SetStdHandle
FlushFileBuffers
ReadFile
CreateFileA
GetStringTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
CloseHandle
RtlUnwind
LCMapStringW
LCMapStringA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetCurrentProcess
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapAlloc
MoveFileA
GetLastError
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapFree
SetErrorMode
GetSystemDefaultLangID
GetCPInfo
GetACP
FreeLibrary
LoadLibraryA
WinExec
WideCharToMultiByte
GetSystemDirectoryA
GetLocaleInfoA
MultiByteToWideChar
SizeofResource
LockResource
FreeResource
FindResourceA
LoadResource
SetEndOfFile
SetFilePointer
_lread
_lwrite
OpenFile
_llseek
_lclose
GetWindowsDirectoryA
GetTickCount
FatalAppExitA
GlobalFlags
LocalReAlloc
LocalUnlock
LocalLock
LocalFree
GetVersion
GetProfileStringA
lstrcmpA
GlobalHandle
RaiseException
IsDBCSLeadByte
IsBadReadPtr
LocalAlloc
lstrlenA
OutputDebugStringA
GetModuleFileNameA
lstrcmpiA
GlobalSize
GlobalReAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
GetProcAddress
GlobalFree
MulDiv
lstrcpyA
GetModuleHandleA
GetOEMCP

user32

GetNextDlgTabItem
SetScrollRange
SetDlgItemTextA
GetDlgItemTextA
GetDoubleClickTime
CheckRadioButton
ReleaseCapture
SetCapture
RegisterClassW
SetMenu
SetWindowTextA
GetWindowTextA
InvalidateRgn
ScrollDC
IsZoomed
AppendMenuA
GetSystemMenu
GetClassLongA
GetClassLongW
DispatchMessageA
DispatchMessageW
GetMessageW
GetMessageA
DefWindowProcW
VkKeyScanA
GetKeyboardLayout
LoadKeyboardLayoutA
ActivateKeyboardLayout
GetKeyboardLayoutList
InvertRect
GetMenuCheckMarkDimensions
RegisterClipboardFormatA
CloseClipboard
EmptyClipboard
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
SetClipboardData
HiliteMenuItem
GetMenuState
GetMenuItemID
DeleteMenu
DrawMenuBar
EqualRect
UnionRect
GetDesktopWindow
GetMessagePos
GetMessageTime
SetParent
GetClassInfoA
EnableWindow
MessageBoxA
DialogBoxParamA
BringWindowToTop
GetActiveWindow
SetTimer
MessageBeep
SendMessageA
GetAsyncKeyState
InvalidateRect
GetScrollPos
GetScrollRange
SetScrollPos
SetCursor
GetCursorPos
InflateRect
PtInRect
CheckDlgButton
IsWindowVisible
GetMenuItemCount
LoadStringA
IsWindowUnicode
UpdateWindow
GetMenu
FindWindowA
GetKeyState
PeekMessageA
KillTimer
DefWindowProcA
LoadIconA
LoadCursorA
IsDialogMessageA
GetSysColor
GetFocus
BeginPaint
EndPaint
ScreenToClient
GetWindowDC
FillRect
CopyRect
SetWindowLongA
DestroyWindow
CheckMenuItem
SetRectEmpty
RemoveMenu
GetSubMenu
CreateMenu
EnableMenuItem
GetMenuStringA
ModifyMenuA
InsertMenuA
TranslateMessage
wsprintfA
SetForegroundWindow
SetFocus
PostQuitMessage
PostMessageA
CreateWindowExA
RegisterClassA
GetDC
ReleaseDC
LoadMenuA
IsIconic
GetWindowLongA
ClientToScreen
GetClassNameA
DestroyMenu
IsRectEmpty
IsWindow
OffsetRect
SetWindowPos
GetClientRect
LoadBitmapA
GetParent
MoveWindow
ShowWindow
GetDlgItem
SetRect
DrawTextA
EndDialog
WindowFromDC
MapWindowPoints
IntersectRect
SystemParametersInfoA
GetWindowRect
GetSystemMetrics
GetDialogBaseUnits
IsDlgButtonChecked
ShowCursor
SendDlgItemMessageA
GetCaretBlinkTime

gdi32

SetBkColor
CreatePatternBrush
CreateBitmap
PtVisible
GetTextFaceA
CreateFontA
ExtTextOutA
LineTo
MoveToEx
SetMapMode
GetMapMode
GetCharWidthA
GetCharWidth32A
GetCharWidthW
GetCharWidth32W
GetBitmapBits
TextOutA
TextOutW
SetTextAlign
CreateCompatibleBitmap
GetTextMetricsA
Escape
CreateICA
EnumFontsA
EnumFontFamiliesExA
CreateSolidBrush
CreateRectRgn
PatBlt
SetRectRgn
CreateRectRgnIndirect
RectVisible
SetROP2
Ellipse
Polygon
Arc
CreatePen
SetMapperFlags
ExtTextOutW
GetTextExtentPoint32A
SetWindowExtEx
SetWindowOrgEx
CreateMetaFileA
CloseMetaFile
RestoreDC
EnumMetaFile
SaveDC
StretchBlt
SetStretchBltMode
PlayMetaFile
SetViewportExtEx
GetMetaFileBitsEx
FillRgn
CombineRgn
Rectangle
GetStockObject
CopyMetaFileA
DeleteMetaFile
CreateCompatibleDC
DPtoLP
BitBlt
DeleteDC
GetObjectA
GetDeviceCaps
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
DeleteObject
SelectClipRgn
GetClipBox

advapi32

RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegSetValueExA
RegEnumValueA
RegCreateKeyExA
RegSetValueA
RegEnumKeyExA
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegCloseKey

ole32

CreateILockBytesOnHGlobal
GetHGlobalFromILockBytes
CoDisconnectObject
CoLockObjectExternal
OleUninitialize
CoRegisterMessageFilter
CoRevokeClassObject
CoRegisterClassObject
OleInitialize
CreateOleAdviseHolder
OleRegEnumFormatEtc
CreateDataAdviseHolder
WriteFmtUserTypeStg
OleTranslateAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
GetRunningObjectTable
CoGetMalloc
OleDuplicateData
ReleaseStgMedium
OleGetClipboard
WriteClassStg
OleFlushClipboard
OleSetClipboard
StgCreateDocfileOnILockBytes

oleaut32

SysFreeString

shell32

DragAcceptFiles

comctl32

ord17

Sections

.text
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 426KB - Virtual size: 426KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9132adaf0f762071751e0cb4d9095c12

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cdCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

3a:82:68:4e:fe:a6:53:db:3c:8d:5e:bbCertificate

Extended Key Usages

Key Usages

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cdCertificate

Extended Key Usages

Key Usages

3a:82:68:4e:fe:a6:53:db:3c:8d:5e:bbCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

95:e9:cf:9d:ea:2a:93:a0:87:56:9c:82:3a:8a:56:05:d0:cb:b3:ae:d1:74:13:ec:a4:0d:11:6d:de:83:ba:69Signer

31:ed:e4:44:c6:ed:7e:b5:64:e0:ce:43:78:22:8f:6e:be:d0:8f:c3Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

shell32

comctl32

Sections

.text Size: 303KB - Virtual size: 303KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 31KB - Virtual size: 75KB

.rsrc Size: 426KB - Virtual size: 426KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

3a:82:68:4e:fe:a6:53:db:3c:8d:5e:bb
Certificate

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

3a:82:68:4e:fe:a6:53:db:3c:8d:5e:bb
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

95:e9:cf:9d:ea:2a:93:a0:87:56:9c:82:3a:8a:56:05:d0:cb:b3:ae:d1:74:13:ec:a4:0d:11:6d:de:83:ba:69
Signer

31:ed:e4:44:c6:ed:7e:b5:64:e0:ce:43:78:22:8f:6e:be:d0:8f:c3
Signer

.text
Size: 303KB - Virtual size: 303KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 31KB - Virtual size: 75KB

.rsrc
Size: 426KB - Virtual size: 426KB