The 360DeskAna64 exe (360安全卫士系统修复图标扫描模块) 360 cn File Malware Analysis

The 360DeskAna64.exe (360安全卫士系统修复图标扫描模块) File Analysis

Updated 3 months ago

Checked by Malware Check

360DeskAna64.exe

Hash Type	Value	Action
MD5	4b26b4b4f38fee644baccefc81716c6c
SHA1	6036d5f882e7e189859e58fbbd4421a2b09b58dc
SHA256	48b9596b3c7b1af2c0c5cd62a815f7e43deac03ae3e91da26e8dec2891c915be
SHA512	76d2235e29a906c8973374d2ec3cb549222d431695daf6ceda2aaeee95fd5bb35dd57d53a73d9a7be04fe38d10f81eee398bb81bf3c104bd0fc17e871d081a60
ImpHash	23503c44ca8af8fe109b5d8055f22070

Hash Type

Value

Action

MD5

4b26b4b4f38fee644baccefc81716c6c

SHA1

6036d5f882e7e189859e58fbbd4421a2b09b58dc

SHA256

48b9596b3c7b1af2c0c5cd62a815f7e43deac03ae3e91da26e8dec2891c915be

SHA512

76d2235e29a906c8973374d2ec3cb549222d431695daf6ceda2aaeee95fd5bb35dd57d53a73d9a7be04fe38d10f81eee398bb81bf3c104bd0fc17e871d081a60

ImpHash

23503c44ca8af8fe109b5d8055f22070

PE Analysis

Basic Information

▼

Icon	Hash: faf73fb49142c5105af36402865d6548 Fuzzy: c387a5dbc4b03f3f1cce95edb2ace2f1 dHash: f8fcec9e8e88c0e8
Image Base	`0x140000000`
Entry Point	`0x140012030`
Compilation Time	2020-04-03 11:30:14
Checksum	0x0003ecf2 (Actual: 0x0003ecf2)
OS Version	5.2
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`C:\vmagent_new\bin\joblist\435521\out\Release\360DeskAna64.pdb`
Digital Signature	OK
Imports	13 libraries
Exports	0 functions
Resources	9 Resources
Sections	6 Sections

Version Information

▼

CompanyName	360.cn
FileDescription	360安全卫士系统修复图标扫描模块
FileVersion	1, 0, 0, 1047
InternalName	360DeskAna.exe
LegalCopyright	(C) 360.cn Inc. All Rights Reserved.
OriginalFilename	360DeskAna.exe
ProductName	360安全卫士
ProductVersion	1, 0, 0, 1047
Translation	0x0804 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	133,736 bytes	134,144 bytes	6.42 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D51B80EBFB657528EF70FB395E4F6BCB`
`.rdata`	`0x00022000`	34,454 bytes	34,816 bytes	5.14 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`AB2A37CABA8110276AC4901FD82777E4`
`.data`	`0x0002b000`	11,096 bytes	8,704 bytes	1.55 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`B23317E8E872FA3C5085F9BFDB4FB68E`
`.pdata`	`0x0002e000`	5,892 bytes	6,144 bytes	5.15 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8EF3D6F3EF69FFC8AF57E466C31EA9C5`
`.rsrc`	`0x00030000`	20,792 bytes	20,992 bytes	5.60 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`608A814DEEADDE4DD4237D1C28D255A5`
`.reloc`	`0x00036000`	328 bytes	512 bytes	3.78 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`B6ABB01BCF584223D6C6F84551A0C27D`

Resource Analysis

▼

Total Resources: 9 (20,209 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	5	18,856 bytes	93.3%
RT_RCDATA	1	128 bytes	0.6%
RT_GROUP_ICON	1	76 bytes	0.4%
RT_VERSION	1	768 bytes	3.8%
RT_MANIFEST	1	381 bytes	1.9%

Certificate Chain Analysis

▼

Certificate Information

Product	360安全卫士
Description	360安全卫士系统修复图标扫描模块
File Version	1, 0, 0, 1047
Original Name	360DeskAna.exe
Signing Date	11:30 AM 04/03/2020 (2107 days ago)
Verification Status	Signed
Signers	Beijing Qihu Technology Co., Ltd.; DigiCert Assured ID Code Signing CA-1; DigiCert
Counter Signers	DigiCert Timestamp Responder; DigiCert Assured ID CA-1; DigiCert
Internal Name	360DeskAna.exe
Copyright	(C) 360.cn Inc. All Rights Reserved.

Certificate Chain Summary

Beijing Qihu Technology Co., Ltd. #1 Primary

Validity Period: 2019-11-22 00:00:00 → 2023-02-04 12:00:00

Signature Algorithm: sha1RSA

Serial Number: 0A 1F 3A 05 7A 1D CE 4B F7 D7 6D 0C 7A DF 83 7E

DigiCert Timestamp Responder #2 Chain

Validity Period: 2014-10-22 00:00:00 → 2024-10-22 00:00:00

Signature Algorithm: sha1RSA

Serial Number: 03 01 9A 02 3A FF 58 B1 6B D6 D5 EA E6 17 F0 66

DigiCert Assured ID Code Signing CA-1 #3 Chain

Validity Period: 2011-02-11 12:00:00 → 2026-02-10 12:00:00

Signature Algorithm: sha1RSA

Serial Number: 0F A8 49 06 15 D7 00 A0 BE 21 76 FD C5 EC 6D BD

DigiCert Assured ID CA-1 #4 Chain

Validity Period: 2006-11-10 00:00:00 → 2021-11-10 00:00:00

Signature Algorithm: sha1RSA

Serial Number: 06 FD F9 03 96 03 AD EA 00 0A EB 3F 27 BB BA 1B

DigiCert SHA2 Assured ID Code Signing CA #5 Chain

Validity Period: 2013-10-22 12:00:00 → 2028-10-22 12:00:00