home

trojanupdate.dll

中国民生银行股份有限公司

Publisher:
中国民生银行股份有限公司  (signed and verified)

MD5:
dc1df3980dc6297d6449c9498a7b4aab

SHA-1:
4f1c821cc8013852e6125ea46c0d749b77f1e5bd

SHA-256:
27369d6cb1d5477d028b5add3cc4532ae13d10758ce071e1c6775a9b86eb10a3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 12:19:41 AM UTC  (today)

File size:
567.8 KB (581,392 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\cmbc\ebankingassistant\antitrojan\trojanupdate.dll

Digital Signature
Signed by:
中国民生银行股份有限公司

Authority:
GlobalSign nv-sa

Valid from:
11/8/2012 6:08:15 PM

Valid to:
11/9/2015 12:56:46 AM

Subject:
CN=中国民生银行股份有限公司, O=中国民生银行股份有限公司, L=北京, S=北京, C=CN

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121AB250CDB603264571A9CBCCAA9745E5D

File PE Metadata
Compilation timestamp:
12/9/2012 3:49:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:AIuVpPJMzkKP0k3/ITDFndCD09oW380LCaNFJSXw:AIsqkKPV3/ITFdfoOLCa

Entry address:
0x1034B4

Entry point:
E9, 4D, E4, FF, FF, D2, C2, 8A, 16, 9C, 9C, F6, D2, E8, A1, C6, FF, FF, C4, E2, 56, EA, 70, 31, 81, 91, 91, 9D, 6D, C1, 49, 55, 47, DB, 4F, D7, 74, 6C, 0C, F6, 54, 92, A4, F2, 4C, 32, 00, 8E, F1, 0F, 1F, 47, DD, 9D, 24, 1A, D6, 4A, AA, 01, 5B, BF, AC, 14, F8, 3A, 63, C3, 61, BD, FE, D5, A8, C9, 81, EB, 30, D8, 8A, 4C, E0, 62, 06, 36, A8, D9, 01, CF, 73, 85, EE, 31, 14, 6A, 82, DE, E6, 88, F4, 6A, 94, F6, 5E, A2, 9C, 6E, 26, 73, 82, 1A, 9E, D4, 7C, 54, 91, 14, 8A, 97, 5B, 57, 83, 06, 5B, 39, 6F, 03, 4D, B0...
 
[+]

Entropy:
7.8743

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
128 KB (131,072 bytes)

Scan trojanupdate.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.