327ce44b423d5fb0e1d6d0ad1c33b2df2ee9de2d9c2e0ed9283744304a21bd9c

Sharing

Copy URL

Twitter E-mail

General

Target

327ce44b423d5fb0e1d6d0ad1c33b2df2ee9de2d9c2e0ed9283744304a21bd9c
Size

116KB
MD5

06d2687bbdf8963a3bd9e31292730fc9
SHA1

6b128ab4f8359b701d0c4270dbc78afa4c2948d6
SHA256

327ce44b423d5fb0e1d6d0ad1c33b2df2ee9de2d9c2e0ed9283744304a21bd9c
SHA512

b29d401418f89efeeeba96c918c41529e78f1a22036b5528b29f7101518db74cb615048a3b4286dd14f86e874fa33045d0bd22a6202920bd9546edda0981695d
SSDEEP

1536:47QcBh7QcBgGJ66bJmheNrQpCu3jvlIyZ91+3YsW1ts0oTMom8PHHgb+yuZHHRfn:MQUQ9+cd/4YsW178PHHgVuZHHfp

Score

N/A

Malware Config

Signatures

Files

327ce44b423d5fb0e1d6d0ad1c33b2df2ee9de2d9c2e0ed9283744304a21bd9c
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:ed:56:87:64:e7:5b:e3:55:74:44:8f:ea:de:fc:d3:bc
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

05-07-2013 13:33

Not After

04-07-2014 13:56

Subject

CN=FRINORTE COMERCIO DE PECAS E SERVICOS LTDA - ME,O=FRINORTE COMERCIO DE PECAS E SERVICOS LTDA - ME,L=MARABA,ST=PARA,C=BR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a7:21:71:fa:36:64:c0:b1:1e:04:7e:d2:0c:f5:ec:4f:91:56:43:d7
Signer

Actual PE Digest

a7:21:71:fa:36:64:c0:b1:1e:04:7e:d2:0c:f5:ec:4f:91:56:43:d7

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=FRINORTE COMERCIO DE PECAS E SERVICOS LTDA - ME,O=FRINORTE COMERCIO DE PECAS E SERVICOS LTDA - ME,L=MARABA,ST=PARA,C=BR

16-06-2022 11:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

04:00:00:00:00:01:2f:4e:e1:35:5cCertificate

Extended Key Usages

Key Usages

11:21:ed:56:87:64:e7:5b:e3:55:74:44:8f:ea:de:fc:d3:bcCertificate

Extended Key Usages

Key Usages

a7:21:71:fa:36:64:c0:b1:1e:04:7e:d2:0c:f5:ec:4f:91:56:43:d7Signer

Signature Validations

Verification

16-06-2022 11:52 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 109KB - Virtual size: 108KB

.sdata Size: 512B - Virtual size: 139B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 12B

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

11:21:ed:56:87:64:e7:5b:e3:55:74:44:8f:ea:de:fc:d3:bc
Certificate

a7:21:71:fa:36:64:c0:b1:1e:04:7e:d2:0c:f5:ec:4f:91:56:43:d7
Signer

16-06-2022 11:52
Valid: false

.text
Size: 109KB - Virtual size: 108KB

.sdata
Size: 512B - Virtual size: 139B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 12B