Overview
overview
6Static
static
3ENCCN.Converters.dll
windows10-2004-x64
1ENCCN.Enumerables.dll
windows10-2004-x64
1ENCCN.Exceptions.dll
windows10-2004-x64
1ENCCN.Html...ms.dll
windows10-2004-x64
1ENCCN.Html.dll
windows10-2004-x64
1ENCCN.Secu...hy.dll
windows10-2004-x64
1ENCCN.Validators.dll
windows10-2004-x64
1ENCCN.View...rs.dll
windows10-2004-x64
1ENCCN.ViewModels.dll
windows10-2004-x64
1ENCCN_Cracked.exe
windows10-2004-x64
6Newtonsoft.Json.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
ENCCN.Converters.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral2
Sample
ENCCN.Enumerables.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
ENCCN.Exceptions.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
ENCCN.Html.Winforms.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
ENCCN.Html.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
ENCCN.Security.Cryptography.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
ENCCN.Validators.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral8
Sample
ENCCN.ViewModels.Converters.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
ENCCN.ViewModels.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral10
Sample
ENCCN_Cracked.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20230220-en
General
-
Target
Архив ZIP - WinRAR.zip
-
Size
12.2MB
-
MD5
7b930511402aa6ab3df851fe7ecf77ef
-
SHA1
764d7943d7cef2bbf4b11f738bf79d4872bf9502
-
SHA256
eaf92739ca7b2a8ca132a1559c9a6fa4257d69511e309a302571c192cfb962a0
-
SHA512
f6c46b3cf52f337b838bdc3c321f139f41eef1b1373fbbdd06365a7cdc5ba4bbefe27847c6f7cfe0057aed00d4b01a03d86b0bb0e376caf1356c94cf319eb631
-
SSDEEP
393216:cL18UUuwJmhudy6hIRRZ0gJ2A0msWA+PIYjQIcSMS:cL182RhudWffoisWAhDSZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ENCCN_Cracked.exe
Files
-
Архив ZIP - WinRAR.zip.zip
-
ENCCN.Converters.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
77:f1:96:82:cf:9c:94:b2:48:58:d0:98:55:81:58:c9Certificate
IssuerCN={9AA1EB3B-3EFC-4552-94CC-892E81B3BDC7}Not Before15/09/2019, 14:19Not After14/09/2020, 20:19SubjectCN={9AA1EB3B-3EFC-4552-94CC-892E81B3BDC7}36:c2:b8:c2:d0:ce:84:70:7c:d4:ae:06:f5:65:7a:7d:20:c9:05:1eSigner
Actual PE Digest36:c2:b8:c2:d0:ce:84:70:7c:d4:ae:06:f5:65:7a:7d:20:c9:05:1eDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN={9AA1EB3B-3EFC-4552-94CC-892E81B3BDC7}15/05/2023, 13:26 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ENCCN.Enumerables.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
7c:08:fd:aa:61:43:ac:ae:43:7b:7f:35:67:04:23:fcCertificate
IssuerCN={098D0BBC-DBCE-4F2B-90B4-099A444C0B01}Not Before15/09/2019, 14:19Not After14/09/2020, 20:19SubjectCN={098D0BBC-DBCE-4F2B-90B4-099A444C0B01}a5:5a:0b:3e:17:60:f4:55:fb:54:66:2b:10:4f:17:22:c0:ea:20:b2Signer
Actual PE Digesta5:5a:0b:3e:17:60:f4:55:fb:54:66:2b:10:4f:17:22:c0:ea:20:b2Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN={098D0BBC-DBCE-4F2B-90B4-099A444C0B01}15/05/2023, 13:26 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ENCCN.Exceptions.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
12:ba:09:64:d8:51:2a:b7:41:a9:1e:63:f8:d3:91:a8Certificate
IssuerCN={041F602E-8530-40ED-AE14-267F5D8ECCC9}Not Before15/09/2019, 14:19Not After14/09/2020, 20:19SubjectCN={041F602E-8530-40ED-AE14-267F5D8ECCC9}4e:7d:ec:91:14:4d:2d:d2:79:43:e9:55:6d:9e:1a:ad:3b:da:a4:41Signer
Actual PE Digest4e:7d:ec:91:14:4d:2d:d2:79:43:e9:55:6d:9e:1a:ad:3b:da:a4:41Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN={041F602E-8530-40ED-AE14-267F5D8ECCC9}15/05/2023, 13:26 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ENCCN.Html.Winforms.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
75:bc:4f:ea:48:75:97:a5:4f:f4:6f:88:66:aa:38:e9Certificate
IssuerCN={48C2871C-D123-4005-BD41-C62063C2BAD8}Not Before24/08/2019, 08:28Not After23/08/2020, 14:28SubjectCN={48C2871C-D123-4005-BD41-C62063C2BAD8}56:3f:7b:e6:8c:6d:8a:78:a8:4e:84:29:32:ac:4d:c6:21:41:0e:1bSigner
Actual PE Digest56:3f:7b:e6:8c:6d:8a:78:a8:4e:84:29:32:ac:4d:c6:21:41:0e:1bDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN={48C2871C-D123-4005-BD41-C62063C2BAD8}15/05/2023, 13:26 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ENCCN.Html.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
3f:2a:fb:05:0c:f3:fa:9a:4c:b8:ef:fb:a3:c1:d5:6eCertificate
IssuerCN={62DEB899-E88E-4241-8A8F-64BAA63DC61B}Not Before24/08/2019, 08:27Not After23/08/2020, 14:27SubjectCN={62DEB899-E88E-4241-8A8F-64BAA63DC61B}3b:0b:27:9e:53:36:8e:ca:a3:2f:bb:b4:db:9d:ae:df:a9:ad:5f:87Signer
Actual PE Digest3b:0b:27:9e:53:36:8e:ca:a3:2f:bb:b4:db:9d:ae:df:a9:ad:5f:87Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN={62DEB899-E88E-4241-8A8F-64BAA63DC61B}15/05/2023, 13:26 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 372KB - Virtual size: 371KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ENCCN.Security.Cryptography.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
4f:9b:8d:bb:48:a7:b4:a3:4c:87:c5:56:bd:f5:2d:7bCertificate
IssuerCN={452C091A-C222-4C4B-8850-CAFB40AC5F5A}Not Before15/09/2019, 14:20Not After14/09/2020, 20:20SubjectCN={452C091A-C222-4C4B-8850-CAFB40AC5F5A}a1:61:33:29:45:8d:2b:74:af:b4:78:be:79:b5:7c:3e:72:02:64:45Signer
Actual PE Digesta1:61:33:29:45:8d:2b:74:af:b4:78:be:79:b5:7c:3e:72:02:64:45Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN={452C091A-C222-4C4B-8850-CAFB40AC5F5A}15/05/2023, 13:26 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ENCCN.Validators.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
23:95:9f:ed:0b:55:be:92:4e:0a:ec:9d:74:0a:11:adCertificate
IssuerCN={54509282-8BE3-48DC-A375-11BF25732782}Not Before15/09/2019, 14:20Not After14/09/2020, 20:20SubjectCN={54509282-8BE3-48DC-A375-11BF25732782}b8:a4:c4:86:05:43:50:6c:fe:40:5f:1e:dc:a4:4f:c8:20:0a:5f:a3Signer
Actual PE Digestb8:a4:c4:86:05:43:50:6c:fe:40:5f:1e:dc:a4:4f:c8:20:0a:5f:a3Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN={54509282-8BE3-48DC-A375-11BF25732782}15/05/2023, 13:26 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ENCCN.ViewModels.Converters.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
32:38:a5:c7:c9:40:eb:8c:40:f3:8f:ea:00:24:23:e2Certificate
IssuerCN={A09775DD-20B1-4448-A75E-7B0EB5A7A61F}Not Before15/09/2019, 14:21Not After14/09/2020, 20:21SubjectCN={A09775DD-20B1-4448-A75E-7B0EB5A7A61F}1d:f9:7d:d2:fb:42:c0:cb:57:7c:27:a9:59:38:f6:b3:b0:1e:87:f7Signer
Actual PE Digest1d:f9:7d:d2:fb:42:c0:cb:57:7c:27:a9:59:38:f6:b3:b0:1e:87:f7Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN={A09775DD-20B1-4448-A75E-7B0EB5A7A61F}15/05/2023, 13:26 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ENCCN.ViewModels.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
3c:e6:a9:59:20:21:29:90:40:c7:a8:56:c1:11:01:1dCertificate
IssuerCN={3F577A21-76F4-4B36-B68E-0F803A88BC57}Not Before15/09/2019, 14:20Not After14/09/2020, 20:20SubjectCN={3F577A21-76F4-4B36-B68E-0F803A88BC57}0b:09:3e:a0:c6:0d:f8:b6:27:d7:5f:b1:03:d5:f3:a3:d9:57:82:0dSigner
Actual PE Digest0b:09:3e:a0:c6:0d:f8:b6:27:d7:5f:b1:03:d5:f3:a3:d9:57:82:0dDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN={3F577A21-76F4-4B36-B68E-0F803A88BC57}15/05/2023, 13:26 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ENCCN_Cracked.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: - Virtual size: 7.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zpi Size: - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.YQ{ Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.{lg Size: 13.1MB - Virtual size: 13.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Encryptor.ECConfig
-
Newtonsoft.Json.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77Certificate
IssuerCN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before10/11/2006, 00:00Not After10/11/2031, 00:00SubjectCN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23Certificate
IssuerCN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before27/04/2018, 12:41Not After27/04/2028, 12:41SubjectCN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7eCertificate
IssuerCN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=USNot Before25/10/2018, 00:00Not After29/10/2021, 12:00SubjectSERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate
IssuerCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before04/01/2017, 00:00Not After18/01/2028, 00:00SubjectCN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before07/01/2016, 12:00Not After07/01/2031, 12:00SubjectCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
a7:cc:fe:41:40:99:65:07:53:c6:c7:f4:1c:e3:22:5f:f1:9e:7a:db:83:aa:c0:1c:bd:9b:44:a1:54:ff:58:a1Signer
Actual PE Digesta7:cc:fe:41:40:99:65:07:53:c6:c7:f4:1c:e3:22:5f:f1:9e:7a:db:83:aa:c0:1c:bd:9b:44:a1:54:ff:58:a1Digest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedtrueVerification
Signing CertificateSERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US22/04/2019, 01:06 Valid: true
Chain 1
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 649KB - Virtual size: 649KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ