tzres[.]dll[.]mui

Sharing

Copy URL Twitter E-mail

General

Target

tzres.dll.mui
Size

55KB
MD5

bd574774edc79b513bfe4d0cb3540e7d
SHA1

e77e29c2448fca7fcac1e496fd3efbaf0e5f6d07
SHA256

70398d44da10a6b50a3ae3c1b769e08934cc577eb775ba8713d4b17f4708dd8f
SHA512

017633900d4c5f860efce548ac1972bb3fe667ab67836f53619a1ed213468ba2be20b1d056100f647fad024e951ac67189ef1f6bb47a057ecbb11488d916d589
SSDEEP

768:Zm+pnRas/Ly0/Fa6VuAreIbiQHMCrFN9zd7:Zm+pRasja6VuAreIbiHkFvzd7

Score

1^/10

Malware Config

Signatures

Files

tzres.dll.mui
.dll windows x86

Code Sign

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d6:4a:d3:ad:b0:8b:13:a1:d2:f2:a7:8a:1e:ed:33:7f:aa:b7:79:31:cb:06:de:36:26:9f:e5:87:db:84:2d:28
Signer

Actual PE Digest

d6:4a:d3:ad:b0:8b:13:a1:d2:f2:a7:8a:1e:ed:33:7f:aa:b7:79:31:cb:06:de:36:26:9f:e5:87:db:84:2d:28

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

03/05/2023, 12:04
Valid: true

Chain 1

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cdCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

d6:4a:d3:ad:b0:8b:13:a1:d2:f2:a7:8a:1e:ed:33:7f:aa:b7:79:31:cb:06:de:36:26:9f:e5:87:db:84:2d:28Signer

Signature Validations

Verification

03/05/2023, 12:04 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 512B - Virtual size: 224B

.rsrc Size: 45KB - Virtual size: 48KB

33:00:00:02:cd:f3:64:bf:f8:d4:4c:5d:51:00:00:00:00:02:cd
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

d6:4a:d3:ad:b0:8b:13:a1:d2:f2:a7:8a:1e:ed:33:7f:aa:b7:79:31:cb:06:de:36:26:9f:e5:87:db:84:2d:28
Signer

03/05/2023, 12:04
Valid: true

.rdata
Size: 512B - Virtual size: 224B

.rsrc
Size: 45KB - Virtual size: 48KB