» icbc_hhusbkey.DLL
Overview
Analysis
File Details

icbc_hhusbkey.DLL

icbc_hhusbkey Module

Industrial and Commercial Bank of China Limited

File name:

icbc_hhusbkey.DLL

Publisher:

Industrial and Commercial Bank of China Limited (signed and verified)

Product:

icbc_hhusbkey Module

Version:

1,0,0,18

MD5:

aff67e424758899c37f233dda017839c

SHA-1:

302fd02b2f67a0d7902312178e050214f42d76f9

SHA-256:

81d8203982b840e147c54d43fdb739a86a762ca239ab4bd59ac573888fc3a65e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 6:23:01 AM UTC (today)

File size:

274.1 KB (280,712 bytes)

Product version:

1,0,0,18

Original file name:

icbc_hhusbkey.DLL

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Windows\System32\icbc_hhusbkey.dll

Digital Signature

Signed by:

Industrial and Commercial Bank of China Limited

Authority:

VeriSign, Inc.

Valid from:

11/28/2013 8:00:00 AM

Valid to:

1/28/2015 7:59:59 AM

Subject:

CN=Industrial and Commercial Bank of China Limited, OU=Software Development Center, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Industrial and Commercial Bank of China Limited, L=Beijing, S=Beijing, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5BCDD3187D24EFE0555372EFDA7C2AF1

File PE Metadata

Compilation timestamp:

7/27/2012 10:42:22 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:TeKQ1lUsaEi25PsVSwxlWKFER+fnHuB9LWZnD4R7h8jWy0:DQ1lUsu2MlWKFROjLQnD4R7K6F

Entry address:

0x785F3

Entry point:

60, C7, 04, 24, 8F, C0, 87, 81, E8, 31, E0, FF, FF, 66, 0F, BA, E1, 03, E9, 13, D7, FD, FF, F9, 66, C7, 04, 24, EA, C6, 3B, 45, F0, 88, 2C, 24, 60, E9, EC, 0F, FE, FF, F5, C6, 44, 24, 04, 25, 60, 30, C0, F8, F8, 9C, F8, F2, AE, E9, 33, 9E, 00, 00, 28, A1, 40, A1, A8, E6, 21, DB, C1, 24, 85, 84, 0D, FC, 81, C8, 31, 98, 35, C4, 9D, AC, E5, E4, F3, 06, 41, D4, FD, F9, DD, EC, E7, CA, 31, F6, DD, F8, AD, 84, 01, FF, CB, 62, DF, EE, 70, 5D, 5E, 5A, 28, 1C, 00, 5C, E9, 22, 2E, 3A, 0A, 63, 0E, 8F, 8D, 18, B9, A7... 
[+]

Entropy:

7.8703 (probably packed)

Code size:

104.5 KB (107,008 bytes)

Scan icbc_hhusbkey.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.