220c8b5b25ff2305a63e8f0e9529fa9c0676e0acb35e6820ff4f7533972a14d3
- SHA256 220c8b5b25ff2305a63e8f0e9529fa9c0676e0acb35e6820ff4f7533972a14d3
Static task
static1
Behavioral task
behavioral1
Sample
多多软件站-提供绿色软件和热门单机游戏下载.url
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
多多软件站-提供绿色软件和热门单机游戏下载.url
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
资源/apowermirror-setup.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
资源/apowermirror-setup.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 220c8b5b25ff2305a63e8f0e9529fa9c0676e0acb35e6820ff4f7533972a14d3
- Size 1.0MB
- Sample261110-wlk2tact61
- SHA256 220c8b5b25ff2305a63e8f0e9529fa9c0676e0acb35e6820ff4f7533972a14d3
- MD5 eb49f6a9e844f32cb4038d73c63b8707
- SHA1 cb160dadd405d8de609a3229118a40906bdf2c9a
- SHA512 5622293363c4c5db11930af2853f4f0ca0891cfd6aa25afed3a279e0a267bb7e905ef194d7ccec76b2f9eb119dd2adf9a2e895af363a3290697f6a78be6ce515
- SSDEEP 24576:1C4QNeIWpqu8n5wvJ6bsqbDElVfx1wh80di6Ckq:1xQNeDquuwvJ8wlZ7O1nq
- TLSH T19F3533D0AF0FB663814F1BC274C4A89FA39502BA5539E9F6F190DF47A62E5404B4B4E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
220c8b5b25ff2305a63e8f0e9529fa9c0676e0acb35e6820ff4f7533972a14d3.zip 1.0MB
-
使用前说明.txt652B
-
多多软件站-提供绿色软件和热门单机游戏下载.url151B
-
资源/apowermirror-setup.exe.exe 1.9MB
使用前说明.txt
- SHA256 4a0f8d6b562ffa5e0ef9fa3747a579ad2c6e9becae22aecc87b499bb87311788
- MD5 41c0a4ab08514e7b52a8fbec25243a50
- SHA1 7ed49598165d9b06305d81494283c4cd13e3020f
- SHA512 85c5cde2250bcc49846cbee35c9406f76829352ecd8e6478e4d5c34610eb796b4673b047001297eeaec50d0f381a59fdd206241a75599844c431d350aefc91e2
- TLSH T1DBF067D730BBACCF1B251E901F0617CE24D48B41673F66A578CD06961F09DF01012B68
- MD5 SHA1 SHA512 TLSH
多多软件站-提供绿色软件和热门单机游戏下载.url
- SHA256 8ce5067162b095958f82aae58b375228d6f0e987ee643729f6c860c74a2be055
- MD5 45c18450ef1bb6b023956b704797f7b3
- SHA1 41dc152a5cb6e6fd8c8fb6e0203221c8fe0de3bb
- SHA512 e6844e78a5ab4e323b2d8fd2960a1da326d333dc3096fda1c1e030a76f25e22858754623176add769e6a86c54de6cd7d877b5005891dfff689662acf176bca7a
- TLSH T140C08CA80101C0C6D300800A20B0F909990F716009C2C2A92A45DF492C8D0C2E048665
- MD5 SHA1 SHA512 TLSH
资源/apowermirror-setup.exe
- IMPHASH bed54a3172cef3d5802e543a459860e4
- SHA256 a05263b8df7764c6ceb033aa81bc0e1c28d953f23b20eefc7fe8c8f56f1a8192
- MD5 ee7add8df6ae902757ea73286bbe7854
- SHA1 d1c5e48c7f603d0ca8d60103d5000fa179c6fe6d
- SHA512 2243bd5848a5c95c5421e9693b92a615696266d25c70bdc8bf894b0bfa9b87d35dcc396ab0a3ee014c59a3d7a0efc722add4227c2035ef158e7666af958e48d2
- SSDEEP 49152:5pBedV1Wzv4HAYl30FzozCKoDsT2C3xT+6pbJy:5bc7MdozCdDC3k
- TLSH T17A95CF227D928077E2660230552EA7BA8AB9B9325B3044C7B3DC2E3D5F715C0973677B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d9:69:15:26:40:88:d5:5c:f2:34:7d:e6:66:5e:51:8f:c8:3c:d3:50:3a:f3:33:77:af:43:ad:75:a3:3f:27:20
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Mong Kok,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
Chains
Mar 26, 2021
SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Mong Kok,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
25:e2:f6:eb:ff:e1:5c:f5:6b:ac:6f:0e:b6:ce:11:41:49:c2:70:23
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Mong Kok,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
Chains
Mar 26, 2021
SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Mong Kok,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Mong Kok,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
Serial Number
0b:48:28:48:f8:42:2a:53:e2:c6:9b:23:0f:18:70:d8
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 29, 2018 - Feb 24, 2022
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Minor OS version
0
Major OS version
6
Entry point
940696
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\CI\builds\86BMAE6D\0\windows\softwarelauncher\tmp\src\Release\apowersoft-software-launcher-c6c2c174.pdb
gdiplus
GdiplusStartup
GdipLoadImageFromStream
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipCreatePen1
GdipDeletePen
GdipSetPenMode
GdipDeleteFont
GdipDeleteStringFormat
GdipDeleteGraphics
GdipAddPathArc
GdipFillRectangleI
GdipMeasureString
GdipCloneBrush
GdipStringFormatGetGenericTypographic
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipGetPropertyItem
GdipImageSelectActiveFrame
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipGetImageWidth
GdipGetPropertyItemSize
GdipDrawImageRectI
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipAddPathLine
GdipDrawRectangleI
GdipCreateFontFromLogfontA
GdipCloneImage
GdipDeleteBrush
GdipAlloc
GdipDeletePath
GdipDisposeImage
GdipSetSmoothingMode
GdipCreatePath
GdipSetStringFormatLineAlign
GdipSetInterpolationMode
GdipCreateSolidFill
GdipSetStringFormatTrimming
GdipCreateFontFromDC
GdipFree
GdipDrawPath
GdipDrawString
GdipCreateFromHDC
GdipCloneStringFormat
GdipSetTextRenderingHint
GdiplusShutdown
kernel32
GlobalUnlock
GetACP
MultiByteToWideChar
ExitProcess
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
DeleteCriticalSection
GlobalAlloc
FormatMessageW
CreateDirectoryW
WriteFile
SetFilePointer
GetFileAttributesW
LocalFileTimeToFileTime
SystemTimeToFileTime
lstrcpyW
lstrcmpiW
GetLocalTime
lstrcpynW
GetStdHandle
GetFileType
PeekNamedPipe
WaitForMultipleObjects
FreeLibrary
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
Sleep
SleepEx
QueryPerformanceFrequency
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
VerifyVersionInfoA
SetLastError
WaitForSingleObjectEx
CreateFileA
GetFileSizeEx
CreateThread
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
WideCharToMultiByte
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
SetEvent
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
EncodePointer
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
GetCurrentThreadId
GetStringTypeW
InitOnceBeginInitialize
InitOnceComplete
AreFileApisANSI
GetTempPathW
SetFilePointerEx
SetEndOfFile
RemoveDirectoryW
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindClose
DeleteFileW
GetCurrentDirectoryW
CreateFileW
lstrlenW
ReadFile
MulDiv
VerifyVersionInfoW
GetCurrentProcessId
VerSetConditionMask
GetProcAddress
LoadLibraryW
FormatMessageA
GetSystemTime
LocalFree
GetTickCount
GetModuleHandleW
GetFileSize
IsProcessorFeaturePresent
FindResourceW
LoadResource
GetSystemInfo
CloseHandle
LockResource
GetLastError
GetPrivateProfileStringW
FreeResource
GetUserPreferredUILanguages
GetVersionExW
WaitForSingleObject
ExpandEnvironmentStringsA
GetUserDefaultUILanguage
GetModuleFileNameW
TerminateProcess
GetModuleHandleExW
WritePrivateProfileStringW
SizeofResource
GlobalLock
GetCurrentThread
GetThreadTimes
FreeLibraryAndExitThread
LoadLibraryExW
RtlUnwind
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitThread
SetConsoleCtrlHandler
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
GetTimeZoneInformation
FlushFileBuffers
HeapReAlloc
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
HeapSize
WriteConsoleW
user32
GetDC
MonitorFromPoint
EndPaint
BeginPaint
GetCursorPos
ReleaseDC
GetWindowLongW
MessageBoxW
GetSystemMetrics
SetTimer
SetWindowLongW
KillTimer
PostQuitMessage
DrawTextA
wsprintfA
GetGUIThreadInfo
CreateAcceleratorTableW
SetForegroundWindow
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
MapVirtualKeyExW
GetKeyboardLayout
GetKeyNameTextW
IsWindowEnabled
InvalidateRgn
MoveWindow
UpdateLayeredWindow
GetWindowRgn
FillRect
CharPrevW
DrawTextW
SetRect
GetCaretPos
HideCaret
CreatePopupMenu
TrackPopupMenu
SetCaretPos
ClientToScreen
CreateCaret
LoadImageW
ReleaseCapture
PtInRect
GetParent
SystemParametersInfoW
IsZoomed
GetClientRect
SetCapture
TranslateMessage
GetUpdateRect
CharNextW
SetFocus
IntersectRect
IsRectEmpty
GetSysColor
MapWindowPoints
GetMonitorInfoW
DispatchMessageW
DestroyMenu
AppendMenuW
GetCaretBlinkTime
ShowCaret
EnableMenuItem
InvalidateRect
SetWindowRgn
DefWindowProcW
CallWindowProcW
GetPropW
RegisterClassExW
ShowWindow
OffsetRect
IsWindow
GetActiveWindow
SendMessageW
UpdateWindow
ScreenToClient
UnionRect
CreateWindowExW
MonitorFromWindow
SetWindowPos
IsWindowVisible
DestroyWindow
GetFocus
GetWindowRect
GetWindow
PostMessageW
GetKeyState
GetMessageW
SetCursor
LoadCursorW
InflateRect
EnableWindow
GetClassInfoExW
SetPropW
RegisterClassW
IsIconic
gdi32
GetTextMetricsW
DeleteDC
CreatePen
Rectangle
GetObjectW
RestoreDC
DeleteObject
CreateEnhMetaFileW
CreateFontIndirectW
GetDeviceCaps
CreateRectRgn
CreatePatternBrush
GetTextExtentPointA
SetBitmapBits
GetBitmapBits
GetEnhMetaFileHeader
GetStockObject
SetWindowOrgEx
PlayEnhMetaFile
CloseEnhMetaFile
CreateDIBitmap
CreateCompatibleDC
SelectObject
SaveDC
CreateCompatibleBitmap
AddFontMemResourceEx
BitBlt
CreateRoundRectRgn
GetObjectA
CombineRgn
ExtSelectClipRgn
CreateSolidBrush
CreatePenIndirect
SetStretchBltMode
MoveToEx
GetCharABCWidthsW
SelectClipRgn
LineTo
SetBkMode
SetTextColor
GetTextExtentPoint32W
TextOutW
CreateRectRgnIndirect
GetClipBox
GdiFlush
StretchBlt
CreateDIBSection
RemoveFontMemResourceEx
SetBkColor
PtInRegion
shell32
SHGetPathFromIDListW
ShellExecuteExW
DragQueryFileW
ord28
SHCreateShellItem
SHGetSpecialFolderPathW
SHBrowseForFolderW
ole32
CoInitializeSecurity
OleRun
CoInitializeEx
OleDuplicateData
DoDragDrop
CoSetProxyBlanket
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
OleLockRunning
CoUninitialize
CoTaskMemFree
CoCreateInstance
ReleaseStgMedium
oleaut32
VariantChangeType
SystemTimeToVariantTime
VariantInit
SafeArrayGetUBound
SysFreeString
SafeArrayGetLBound
SafeArrayGetElement
VariantClear
SysAllocString
advapi32
RegEnumValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegSetValueExA
GetUserNameA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
comctl32
ord17
_TrackMouseEvent
InitCommonControlsEx
imm32
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
wldap32
ord50
ord41
ord22
ord26
ord27
ord45
ord33
ord35
ord79
ord30
ord200
ord301
ord60
ord211
ord46
ord32
ord143
crypt32
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
CertAddCertificateContextToStore
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ws2_32
send
recv
closesocket
WSAGetLastError
gethostbyname
WSAStartup
gethostname
ntohl
bind
getsockname
htons
socket
listen
ntohs
WSACleanup
recvfrom
sendto
setsockopt
WSAIoctl
__WSAFDIsSet
select
freeaddrinfo
getaddrinfo
htonl
ioctlsocket
getsockopt
getpeername
connect
accept
WSASetLastError
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
292KB
Virtual Size
291KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
374KB
Virtual Size
373KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
69KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=25, id=259, version=27412,
count=204, id=261, version=27412,
count=6, id=199, version=41118,
count=20, id=260, version=28920,
count=25, id=259, version=28920,
count=153, id=261, version=28920,
count=2, id=253, version=23601,
count=39, id=260, version=27412,
count=3, id=262, version=27412,
count=9, id=261, productName=VS2019 v16.5.5 build 28614, version=28614,
count=105, id=260, productName=VS2019 v16.5.5 build 28614, version=28614,
count=1, id=263, version=27412,
count=31, id=257, version=27412,
count=512, id=1, productName=Unmarked objects,
count=53, id=265, version=29112,
count=1, id=255, productName=VS2019 v16.7.5 build 29112, version=29112,
count=1, id=258, productName=VS2019 v16.7.5 build 29112, version=29112,