443a8b589b828915caf89e621734f9f8[.]dll[.]exe[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

443a8b589b828915caf89e621734f9f8.dll.exe.bin
Size

127KB
MD5

443a8b589b828915caf89e621734f9f8
SHA1

623004b24b98f5f193f0bfbdb1eb9acc68f76ce2
SHA256

8c5982fded8fe30254f51d439888fa007ef83f4067c212e343d007530f278759
SHA512

c24f867bd216f12a64bce991afee93a0fdf10393c0c2bedb7b91c3413ec16ef6c1e1b24f3fb390ded95de66606103281d2a942b20dd6d3edca41bc37d8d43566
SSDEEP

3072:bmjdN9cTsWnPGX3VFc9l+gpZf3QX4z6qx5j/cOV:IRgnK3v96c4z/x5F

Score

1^/10

Malware Config

Signatures

Files

443a8b589b828915caf89e621734f9f8.dll.exe.bin
.dll windows x64

Code Sign

33:00:00:04:91:64:62:f3:b7:3e:e2:0c:cd:00:00:00:00:04:91
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:47

Not After

11/05/2023, 20:47

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

75:63:dc:a6:d1:a0:02:17:f3:8d:87:36:c1:78:68:c1:27:cf:47:ef:80:17:36:c6:25:8d:1a:2f:3f:df:f3:71
Signer

Actual PE Digest

75:63:dc:a6:d1:a0:02:17:f3:8d:87:36:c1:78:68:c1:27:cf:47:ef:80:17:36:c6:25:8d:1a:2f:3f:df:f3:71

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

03/05/2023, 12:04
Valid: true

Chain 1

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Exports

Exports

D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute
IEX

Sections

.itext
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:04:91:64:62:f3:b7:3e:e2:0c:cd:00:00:00:00:04:91Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

75:63:dc:a6:d1:a0:02:17:f3:8d:87:36:c1:78:68:c1:27:cf:47:ef:80:17:36:c6:25:8d:1a:2f:3f:df:f3:71Signer

Signature Validations

Verification

03/05/2023, 12:04 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.itext Size: 115KB - Virtual size: 115KB

.rsrc Size: 1KB - Virtual size: 1KB

33:00:00:04:91:64:62:f3:b7:3e:e2:0c:cd:00:00:00:00:04:91
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

75:63:dc:a6:d1:a0:02:17:f3:8d:87:36:c1:78:68:c1:27:cf:47:ef:80:17:36:c6:25:8d:1a:2f:3f:df:f3:71
Signer

03/05/2023, 12:04
Valid: true

.itext
Size: 115KB - Virtual size: 115KB

.rsrc
Size: 1KB - Virtual size: 1KB