c96cf2857a6044e9149ab0d55c3dfe280cefe8add4791[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

c96cf2857a6044e9149ab0d55c3dfe280cefe8add4791.dll
Size

5.7MB
MD5

43c0da5fc87314c52d5990a0308fbf0c
SHA1

d2f888e4da77df21c3910ef4ef7b6171e8581b73
SHA256

c96cf2857a6044e9149ab0d55c3dfe280cefe8add4791e1f1111adfc1832e6e6
SHA512

382ec0ee881fa747d54037e805a7c3a03d909783d71d2757bd6ada27b2789eeefdc119325c21ce066e81c4f92ab0c46b68d7d3d571a1c5617fa51cf159c815c5
SSDEEP

98304:NgPgy6eVbED3MysMPBiKvycORhTcmdDcuf/LpYXiXymzlA3bmSw1VMkMDV:W4yLJ+8ABUMuf/LHzlA3UV2DV

Score

N/A

Malware Config

Signatures

Files

c96cf2857a6044e9149ab0d55c3dfe280cefe8add4791.dll
.dll windows x86

ad12d2fe7351f5f529cacf9213f42683

Code Sign

19:8e:0b:92:cb:5a:45:9a:4d:c7:1e:48:ba:1d:d1:c4
Certificate

Issuer

CN=www.pair.com

Not Before

04/01/2023, 21:38

Not After

04/01/2024, 21:58

Subject

CN=www.pair.com

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

28/07/2022, 08:56

Not After

27/07/2033, 08:56

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

DestroyWindow
CharUpperBuffW

gdi32

GetObjectW

ole32

CoDecodeProxy

Exports

Exports

_Start@16

Sections

.sdbid
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QYP
Size: - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdbid
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c+"
Size: - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

..R~
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.5sp
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 173KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad12d2fe7351f5f529cacf9213f42683

Code Sign

19:8e:0b:92:cb:5a:45:9a:4d:c7:1e:48:ba:1d:d1:c4Certificate

Extended Key Usages

Key Usages

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

Exports

Exports

Sections

.sdbid Size: - Virtual size: 128KB

.QYP Size: - Virtual size: 288KB

.sdbid Size: - Virtual size: 1.5MB

.c+" Size: - Virtual size: 2.4MB

..R~ Size: 1024B - Virtual size: 924B

.5sp Size: 5.6MB - Virtual size: 5.6MB

.reloc Size: 2KB - Virtual size: 1KB

.rsrc Size: 173KB - Virtual size: 287KB

19:8e:0b:92:cb:5a:45:9a:4d:c7:1e:48:ba:1d:d1:c4
Certificate

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

.sdbid
Size: - Virtual size: 128KB

.QYP
Size: - Virtual size: 288KB

.sdbid
Size: - Virtual size: 1.5MB

.c+"
Size: - Virtual size: 2.4MB

..R~
Size: 1024B - Virtual size: 924B

.5sp
Size: 5.6MB - Virtual size: 5.6MB

.reloc
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 173KB - Virtual size: 287KB