LayoutEditorLngbg[.]34D99E67_74A3_437B_9458_A83B8BA67C7F[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

LayoutEditorLngbg.34D99E67_74A3_437B_9458_A83B8BA67C7F.dll
Size

73KB
MD5

0674b285ff4bd59ecdbd37999cd1df4e
SHA1

cf366491129f5b5a9f452610e05e2fd73eda883c
SHA256

78744d27222c6e97aa14656e383ab71b5bc4bd0b941077ab45a1fe0df2d6a5bb
SHA512

0d814e5e07122f6952e2b1f00218914461075e92294af3337e397fdf7bbec865091efc6fa19d3b268faeeeff044aab89a09837d0e1c4bbbd2444c9eb99f4fafa
SSDEEP

1536:BDUb9PNr3IwCyGgLSKxNujD+/1P0BYaNd24BUDB:Bw3IwVFxN280JBUDB

Score

N/A

Malware Config

Signatures

Files

LayoutEditorLngbg.34D99E67_74A3_437B_9458_A83B8BA67C7F.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

04:0c:c2:25:5d:b4:e4:8d:a1:b4:f2:42:f5:ed:fa:73
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2018 00:00

Not After

14-12-2021 12:00

Subject

SERIALNUMBER=J12/1244/1999,CN=Softland SRL,O=Softland SRL,L=Cluj-Napoca,C=RO,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302524f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:0c:c2:25:5d:b4:e4:8d:a1:b4:f2:42:f5:ed:fa:73
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2018 00:00

Not After

14-12-2021 12:00

Subject

SERIALNUMBER=J12/1244/1999,CN=Softland SRL,O=Softland SRL,L=Cluj-Napoca,C=RO,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302524f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:38:d7:99:56:fb:f0:8b:a5:1b:db:1e:08:fe:94:2f:ec:b5:4d:26:35:fb:a9:12:53:e5:6c:f8:68:21:29:8d
Signer

Actual PE Digest

62:38:d7:99:56:fb:f0:8b:a5:1b:db:1e:08:fe:94:2f:ec:b5:4d:26:35:fb:a9:12:53:e5:6c:f8:68:21:29:8d

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=J12/1244/1999,CN=Softland SRL,O=Softland SRL,L=Cluj-Napoca,C=RO,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302524f

08-12-2021 21:35
Valid: true

Chain 1

SERIALNUMBER=J12/1244/1999,CN=Softland SRL,O=Softland SRL,L=Cluj-Napoca,C=RO,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302524f

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

15:16:da:e5:5e:90:89:52:22:bf:e6:65:53:2d:59:de:73:8d:d5:53
Signer

Actual PE Digest

15:16:da:e5:5e:90:89:52:22:bf:e6:65:53:2d:59:de:73:8d:d5:53

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=J12/1244/1999,CN=Softland SRL,O=Softland SRL,L=Cluj-Napoca,C=RO,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302524f

08-12-2021 21:35
Valid: true

Chain 1

SERIALNUMBER=J12/1244/1999,CN=Softland SRL,O=Softland SRL,L=Cluj-Napoca,C=RO,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302524f

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

04:0c:c2:25:5d:b4:e4:8d:a1:b4:f2:42:f5:ed:fa:73Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

04:0c:c2:25:5d:b4:e4:8d:a1:b4:f2:42:f5:ed:fa:73Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

62:38:d7:99:56:fb:f0:8b:a5:1b:db:1e:08:fe:94:2f:ec:b5:4d:26:35:fb:a9:12:53:e5:6c:f8:68:21:29:8dSigner

Signature Validations

Verification

08-12-2021 21:35 Valid: true

Chain 1

15:16:da:e5:5e:90:89:52:22:bf:e6:65:53:2d:59:de:73:8d:d5:53Signer

Signature Validations

Verification

08-12-2021 21:35 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 58KB - Virtual size: 58KB

.reloc Size: 512B - Virtual size: 12B

04:0c:c2:25:5d:b4:e4:8d:a1:b4:f2:42:f5:ed:fa:73
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

04:0c:c2:25:5d:b4:e4:8d:a1:b4:f2:42:f5:ed:fa:73
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

62:38:d7:99:56:fb:f0:8b:a5:1b:db:1e:08:fe:94:2f:ec:b5:4d:26:35:fb:a9:12:53:e5:6c:f8:68:21:29:8d
Signer

08-12-2021 21:35
Valid: true

15:16:da:e5:5e:90:89:52:22:bf:e6:65:53:2d:59:de:73:8d:d5:53
Signer

08-12-2021 21:35
Valid: true

.text
Size: 58KB - Virtual size: 58KB

.reloc
Size: 512B - Virtual size: 12B