DNSBench[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

DNSBench.exe
Size

159KB
MD5

154ee28facb62e73e1dcaf3562c2d6ec
SHA1

570b1f2153c735ea0f9e5680c8f21cc581cd69e9
SHA256

ab42c94fc03ddbf446319772518b229d7b2e2546fdddaae7c01abe0fa8a02be1
SHA512

b000502243b66e9dc535b0eb6fbd9212ba6adabc519c0ca4c44d65ace1c659efa8be12a843f480e3e8ff436246d919ba19e5307e9aedd81893b77343274d7735
SSDEEP

3072:XSww+ICvU0Qv8Z9yzvSh3gzaDKzHDa4cn2qTWM9gbYfNjh:XSwwPC08CzvSh3geOzm4cn2AWM9gb4

Score

1^/10

Malware Config

Signatures

Files

DNSBench.exe
.exe windows x86

09d0478591d4f788cb3e5ea416c25237

Code Sign

03:5f:7e:bd:ac:f2:2e:fe:d5:8c:d2:24:2c:66:b0:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-04-2019 00:00

Not After

20-04-2022 12:00

Subject

SERIALNUMBER=C1411812,CN=Gibson Research Corporation,OU=Gibson Research Corporation,O=Gibson Research Corporation,L=Laguna Niguel,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29
Certificate

Issuer

CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:5c:00:4b:91:1e:f9:e0:1b:22:9a:26:a5:7d:bb:b2
Certificate

Issuer

CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

24-02-2022 00:00

Not After

03-02-2025 23:59

Subject

SERIALNUMBER=C1411812,CN=Gibson Research Corporation,O=Gibson Research Corporation,L=Laguna Niguel,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

55:ee:d4:e9:e8:6a:9f:ed:ed:f5:4c:25:59:a7:f9:99:83:0e:1d:31:8f:01:fe:c8:20:be:8e:d1:8f:6a:01:14
Signer

Actual PE Digest

55:ee:d4:e9:e8:6a:9f:ed:ed:f5:4c:25:59:a7:f9:99:83:0e:1d:31:8f:01:fe:c8:20:be:8e:d1:8f:6a:01:14

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=C1411812,CN=Gibson Research Corporation,O=Gibson Research Corporation,L=Laguna Niguel,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

01-01-0001 00:00
Valid: false

55:ee:d4:e9:e8:6a:9f:ed:ed:f5:4c:25:59:a7:f9:99:83:0e:1d:31:8f:01:fe:c8:20:be:8e:d1:8f:6a:01:14
Signer

Actual PE Digest

55:ee:d4:e9:e8:6a:9f:ed:ed:f5:4c:25:59:a7:f9:99:83:0e:1d:31:8f:01:fe:c8:20:be:8e:d1:8f:6a:01:14

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=C1411812,CN=Gibson Research Corporation,OU=Gibson Research Corporation,O=Gibson Research Corporation,L=Laguna Niguel,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

21-04-2019 20:41
Valid: true

Chain 1

SERIALNUMBER=C1411812,CN=Gibson Research Corporation,OU=Gibson Research Corporation,O=Gibson Research Corporation,L=Laguna Niguel,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 129KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

09d0478591d4f788cb3e5ea416c25237

Code Sign

03:5f:7e:bd:ac:f2:2e:fe:d5:8c:d2:24:2c:66:b0:60Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29Certificate

Extended Key Usages

Key Usages

0f:5c:00:4b:91:1e:f9:e0:1b:22:9a:26:a5:7d:bb:b2Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

55:ee:d4:e9:e8:6a:9f:ed:ed:f5:4c:25:59:a7:f9:99:83:0e:1d:31:8f:01:fe:c8:20:be:8e:d1:8f:6a:01:14Signer

Signature Validations

Verification

01-01-0001 00:00 Valid: false

55:ee:d4:e9:e8:6a:9f:ed:ed:f5:4c:25:59:a7:f9:99:83:0e:1d:31:8f:01:fe:c8:20:be:8e:d1:8f:6a:01:14Signer

Signature Validations

Verification

21-04-2019 20:41 Valid: true

Chain 1

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 129KB - Virtual size: 664KB

.rsrc Size: 9KB - Virtual size: 12KB

03:5f:7e:bd:ac:f2:2e:fe:d5:8c:d2:24:2c:66:b0:60
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29
Certificate

0f:5c:00:4b:91:1e:f9:e0:1b:22:9a:26:a5:7d:bb:b2
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

55:ee:d4:e9:e8:6a:9f:ed:ed:f5:4c:25:59:a7:f9:99:83:0e:1d:31:8f:01:fe:c8:20:be:8e:d1:8f:6a:01:14
Signer

01-01-0001 00:00
Valid: false

55:ee:d4:e9:e8:6a:9f:ed:ed:f5:4c:25:59:a7:f9:99:83:0e:1d:31:8f:01:fe:c8:20:be:8e:d1:8f:6a:01:14
Signer

21-04-2019 20:41
Valid: true

.text
Size: 129KB - Virtual size: 664KB

.rsrc
Size: 9KB - Virtual size: 12KB