ad8280eb74cb1cd39bf0fa28e3c884a3203474378f24c14d4c68938ca39cfab4

Sharing

Copy URL

Twitter E-mail

General

Target

ad8280eb74cb1cd39bf0fa28e3c884a3203474378f24c14d4c68938ca39cfab4
Size

19KB
MD5

b3ce28b100a6b384d336d11af9caa935
SHA1

abdb85b7e211c55268372e760c34578801fd1692
SHA256

ad8280eb74cb1cd39bf0fa28e3c884a3203474378f24c14d4c68938ca39cfab4
SHA512

17d16b705c6f96daec7594407d7cad41b8d2866f97e1796d0c9c178132ca9828c95f782a3214e29a44a90b6ccc0296a17e473dfb6127f6940ac5f11281610662
SSDEEP

384:jrswfN6H8PWzDubFYxvgy+V/33bRDGapBjT:nswfNM3g1/DGQN

Score

N/A

Malware Config

Signatures

Files

ad8280eb74cb1cd39bf0fa28e3c884a3203474378f24c14d4c68938ca39cfab4
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

03:91:4f:49:e6:a7:26:71:c7:ec:48:c7:d5:82:21:84
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

05-01-2017 00:00

Not After

10-01-2018 12:00

Subject

CN=Xamarin Inc.,O=Xamarin Inc.,L=San Francisco,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

aa:6e:df:6e:4a:da:b4:4e:3f:8f:0f:f6:7c:34:59:7e:45:45:7d:5a
Signer

Actual PE Digest

aa:6e:df:6e:4a:da:b4:4e:3f:8f:0f:f6:7c:34:59:7e:45:45:7d:5a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Xamarin Inc.,O=Xamarin Inc.,L=San Francisco,ST=California,C=US

22-02-2017 01:45
Valid: true

Chain 1

CN=Xamarin Inc.,O=Xamarin Inc.,L=San Francisco,ST=California,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cbCertificate

Extended Key Usages

03:91:4f:49:e6:a7:26:71:c7:ec:48:c7:d5:82:21:84Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

aa:6e:df:6e:4a:da:b4:4e:3f:8f:0f:f6:7c:34:59:7e:45:45:7d:5aSigner

Signature Validations

Verification

22-02-2017 01:45 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 10KB - Virtual size: 10KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

03:91:4f:49:e6:a7:26:71:c7:ec:48:c7:d5:82:21:84
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

aa:6e:df:6e:4a:da:b4:4e:3f:8f:0f:f6:7c:34:59:7e:45:45:7d:5a
Signer

22-02-2017 01:45
Valid: true

.text
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B