47b5263733dc65e19ab3b0845fcd5df955c4f9c3bb8da87833d273c996b78529

Sharing

Copy URL Twitter E-mail

General

Target

47b5263733dc65e19ab3b0845fcd5df955c4f9c3bb8da87833d273c996b78529
Size

102KB
MD5

43f7cf9621e04f5cff069bd9403d8959
SHA1

fe428b985793e14a25af7d5ae58a26992778323e
SHA256

47b5263733dc65e19ab3b0845fcd5df955c4f9c3bb8da87833d273c996b78529
SHA512

46864efd8cf5f94b1ca15befb4f73ecc499e6b2d8584e2dc821714b3623dc1e97151abcc04c0e05779912f674fff6a27207c6c0dcc0272ea6a8eb582a70ff48d
SSDEEP

1536:lgLhwZZHXDwGKdgTuHKvwGJRq70lQMY0BbzqmlfgpHPTG58gEiUd16:lga3HXDvbQKZR0sbzMTBgEZ6

Score

N/A

Malware Config

Signatures

Files

47b5263733dc65e19ab3b0845fcd5df955c4f9c3bb8da87833d273c996b78529
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:08:77:5f:00:00:00:00:00:4a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/07/2010, 22:53

Not After

19/10/2011, 22:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:04:ca:69:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/06/2007, 22:03

Not After

05/06/2012, 22:13

Subject

CN=Microsoft Time-Stamp Service,OU=nCipher DSE ESN:A5B0-CDE0-DC94,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

59:04:4d:e7:b1:97:6e:6b:11:07:8b:af:e2:9d:e9:88:0b:73:c3:5f
Signer

Actual PE Digest

59:04:4d:e7:b1:97:6e:6b:11:07:8b:af:e2:9d:e9:88:0b:73:c3:5f

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

24/07/2011, 09:10
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:08:77:5f:00:00:00:00:00:4aCertificate

Extended Key Usages

Key Usages

61:04:ca:69:00:00:00:00:00:08Certificate

Extended Key Usages

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

61:15:08:27:00:00:00:00:00:0cCertificate

Extended Key Usages

Key Usages

59:04:4d:e7:b1:97:6e:6b:11:07:8b:af:e2:9d:e9:88:0b:73:c3:5fSigner

Signature Validations

Verification

24/07/2011, 09:10 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 84KB - Virtual size: 82KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

61:08:77:5f:00:00:00:00:00:4a
Certificate

61:04:ca:69:00:00:00:00:00:08
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

61:15:08:27:00:00:00:00:00:0c
Certificate

59:04:4d:e7:b1:97:6e:6b:11:07:8b:af:e2:9d:e9:88:0b:73:c3:5f
Signer

24/07/2011, 09:10
Valid: false

.text
Size: 84KB - Virtual size: 82KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B