System[.]Console[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

System.Console.dll
Size

153KB
MD5

ea07bee7dca26b7033845abbd39568d7
SHA1

a31f8f665c51d3ab33499504f715a5bd1d974429
SHA256

77ee0a99fc383221d51002dc54da88ee9725db06266c03e8ba33efaf0afbf8e1
SHA512

42593669427f8cbaa98186c5d93e5d490bc4eecebda5bbb32d577bf78a2f71ebde37b2f399c4d9b49283e7adcaa37230667268421b5e14dcbb0fd58667b1f925
SSDEEP

3072:gw3mIom43AYT+a5TfaEPv+KXUPmOaYIA1Z:XwqaFCGVkecIA

Score

1^/10

Malware Config

Signatures

Files

System.Console.dll
.dll windows x64

Code Sign

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/02/2021, 20:09

Not After

10/02/2022, 20:09

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

87:f0:ad:59:9c:a7:a3:af:41:5d:fc:c9:94:27:a6:28:4b:f4:48:34:29:af:63:40:fc:23:50:d2:b4:b9:8e:b5
Signer

Actual PE Digest

87:f0:ad:59:9c:a7:a3:af:41:5d:fc:c9:94:27:a6:28:4b:f4:48:34:29:af:63:40:fc:23:50:d2:b4:b9:8e:b5

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

11/05/2023, 10:06
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

87:f0:ad:59:9c:a7:a3:af:41:5d:fc:c9:94:27:a6:28:4b:f4:48:34:29:af:63:40:fc:23:50:d2:b4:b9:8e:b5Signer

Signature Validations

Verification

11/05/2023, 10:06 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 133KB - Virtual size: 133KB

.data Size: 8KB - Virtual size: 7KB

.reloc Size: 1024B - Virtual size: 688B

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

87:f0:ad:59:9c:a7:a3:af:41:5d:fc:c9:94:27:a6:28:4b:f4:48:34:29:af:63:40:fc:23:50:d2:b4:b9:8e:b5
Signer

11/05/2023, 10:06
Valid: false

.text
Size: 133KB - Virtual size: 133KB

.data
Size: 8KB - Virtual size: 7KB

.reloc
Size: 1024B - Virtual size: 688B