46454381b1df6ef37475dad5569ac5830ba8ddc98b61a8084b4f94723df5e625

Sharing

Copy URL Twitter E-mail

General

Target
46454381b1df6ef37475dad5569ac5830ba8ddc98b61a8084b4f94723df5e625
Size 218KB
Sample261027-e7adrsav8v
SHA256 46454381b1df6ef37475dad5569ac5830ba8ddc98b61a8084b4f94723df5e625
MD5 cefac98d98e746b6bbc830edeb2f208c
SHA1 a7355dd21a37465e9a49a385dbb67df29b6204a4
SHA512 9e66ce154f7e767f0bd9bc54c28c7f96e02c4bc49202b2e425ebdba16cace4cfe11419f43b8e6c1659e192d9960ec520d9b7df5759377d58b90b2179e2f6b4fa
SSDEEP 6144:aFMllOJTbaDhZJ7SWr3uGsQvMRlkM4RD/qzMfUQ:h7OJTbuBn3u8MRGM4h/qofV
TLSH
T16124CF01B150C3FAD47E18383074D7615BEAB83CCA9969CBE35446659E3C6C29E78E2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
46454381b1df6ef37475dad5569ac5830ba8ddc98b61a8084b4f94723df5e625

File Explorer

46454381b1df6ef37475dad5569ac5830ba8ddc98b61a8084b4f94723df5e625

.dll 218KB

46454381b1df6ef37475dad5569ac5830ba8ddc98b61a8084b4f94723df5e625

IMPHASH cdd42c264bacf432f4003380d6c8ce27
SHA256 46454381b1df6ef37475dad5569ac5830ba8ddc98b61a8084b4f94723df5e625
MD5 cefac98d98e746b6bbc830edeb2f208c
SHA1 a7355dd21a37465e9a49a385dbb67df29b6204a4
SHA512 9e66ce154f7e767f0bd9bc54c28c7f96e02c4bc49202b2e425ebdba16cace4cfe11419f43b8e6c1659e192d9960ec520d9b7df5759377d58b90b2179e2f6b4fa
SSDEEP 6144:aFMllOJTbaDhZJ7SWr3uGsQvMRlkM4RD/qzMfUQ:h7OJTbuBn3u8MRGM4h/qofV
TLSH
T16124CF01B150C3FAD47E18383074D7615BEAB83CCA9969CBE35446659E3C6C29E78E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

71:5b:af:22:8c:7c:e5:be:0b:fc:79:16:10:a2:31:5e:63:b7:3d:7f:d2:0f:a0:6d:77:33:4d:fc:78:79:0a:69

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Chains

Feb 14, 2025

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Serial Number

01:ba:be:96:e5:0e:a2:5f:3f:0e:88:42:9a:74:a4:62

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 17, 2024 - Jun 19, 2027

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

16956

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\landun\pinyin_agent\workspace\p-f93f0d74ed8a49278e11882bf2562c5a\src\bin\Release_Win32\HWSignature.pdb

ws2_32

WSAStartup

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

kernel32

EnterCriticalSection CreateFileW DecodePointer GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte HeapFree DeviceIoControl lstrcatA CopyFileA CreateFileA GetSystemDirectoryA CloseHandle HeapAlloc GetProcessHeap lstrcpyA lstrlenA GlobalAlloc LocalAlloc GetLastError LoadLibraryA GetVersionExA GetProcAddress LocalFree FreeLibrary HeapReAlloc SetLastError GlobalFree GetTickCount GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedFlushSList RtlUnwind WriteConsoleW LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException ExitProcess GetModuleHandleExW GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetFilePointerEx GetStringTypeW SetStdHandle HeapSize

user32

IsCharAlphaNumericA wsprintfA

Sharing

General

Malware Config

Signatures

File Explorer

46454381b1df6ef37475dad5569ac5830ba8ddc98b61a8084b4f94723df5e625

PE Signature issue

ws2_32

version

kernel32

user32

generic