Архив ZIP - WinRAR[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Архив ZIP - WinRAR.zip
Size

12.2MB
MD5

7b930511402aa6ab3df851fe7ecf77ef
SHA1

764d7943d7cef2bbf4b11f738bf79d4872bf9502
SHA256

eaf92739ca7b2a8ca132a1559c9a6fa4257d69511e309a302571c192cfb962a0
SHA512

f6c46b3cf52f337b838bdc3c321f139f41eef1b1373fbbdd06365a7cdc5ba4bbefe27847c6f7cfe0057aed00d4b01a03d86b0bb0e376caf1356c94cf319eb631
SSDEEP

393216:cL18UUuwJmhudy6hIRRZ0gJ2A0msWA+PIYjQIcSMS:cL182RhudWffoisWAhDSZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ENCCN_Cracked.exe

Files

Архив ZIP - WinRAR.zip
.zip
ENCCN.Converters.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

77:f1:96:82:cf:9c:94:b2:48:58:d0:98:55:81:58:c9
Certificate

Issuer

CN={9AA1EB3B-3EFC-4552-94CC-892E81B3BDC7}

Not Before

15/09/2019, 14:19

Not After

14/09/2020, 20:19

Subject

CN={9AA1EB3B-3EFC-4552-94CC-892E81B3BDC7}

36:c2:b8:c2:d0:ce:84:70:7c:d4:ae:06:f5:65:7a:7d:20:c9:05:1e
Signer

Actual PE Digest

36:c2:b8:c2:d0:ce:84:70:7c:d4:ae:06:f5:65:7a:7d:20:c9:05:1e

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN={9AA1EB3B-3EFC-4552-94CC-892E81B3BDC7}

15/05/2023, 13:26
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ENCCN.Enumerables.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

7c:08:fd:aa:61:43:ac:ae:43:7b:7f:35:67:04:23:fc
Certificate

Issuer

CN={098D0BBC-DBCE-4F2B-90B4-099A444C0B01}

Not Before

15/09/2019, 14:19

Not After

14/09/2020, 20:19

Subject

CN={098D0BBC-DBCE-4F2B-90B4-099A444C0B01}

a5:5a:0b:3e:17:60:f4:55:fb:54:66:2b:10:4f:17:22:c0:ea:20:b2
Signer

Actual PE Digest

a5:5a:0b:3e:17:60:f4:55:fb:54:66:2b:10:4f:17:22:c0:ea:20:b2

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN={098D0BBC-DBCE-4F2B-90B4-099A444C0B01}

15/05/2023, 13:26
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ENCCN.Exceptions.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

12:ba:09:64:d8:51:2a:b7:41:a9:1e:63:f8:d3:91:a8
Certificate

Issuer

CN={041F602E-8530-40ED-AE14-267F5D8ECCC9}

Not Before

15/09/2019, 14:19

Not After

14/09/2020, 20:19

Subject

CN={041F602E-8530-40ED-AE14-267F5D8ECCC9}

4e:7d:ec:91:14:4d:2d:d2:79:43:e9:55:6d:9e:1a:ad:3b:da:a4:41
Signer

Actual PE Digest

4e:7d:ec:91:14:4d:2d:d2:79:43:e9:55:6d:9e:1a:ad:3b:da:a4:41

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN={041F602E-8530-40ED-AE14-267F5D8ECCC9}

15/05/2023, 13:26
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ENCCN.Html.Winforms.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

75:bc:4f:ea:48:75:97:a5:4f:f4:6f:88:66:aa:38:e9
Certificate

Issuer

CN={48C2871C-D123-4005-BD41-C62063C2BAD8}

Not Before

24/08/2019, 08:28

Not After

23/08/2020, 14:28

Subject

CN={48C2871C-D123-4005-BD41-C62063C2BAD8}

56:3f:7b:e6:8c:6d:8a:78:a8:4e:84:29:32:ac:4d:c6:21:41:0e:1b
Signer

Actual PE Digest

56:3f:7b:e6:8c:6d:8a:78:a8:4e:84:29:32:ac:4d:c6:21:41:0e:1b

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN={48C2871C-D123-4005-BD41-C62063C2BAD8}

15/05/2023, 13:26
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ENCCN.Html.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

3f:2a:fb:05:0c:f3:fa:9a:4c:b8:ef:fb:a3:c1:d5:6e
Certificate

Issuer

CN={62DEB899-E88E-4241-8A8F-64BAA63DC61B}

Not Before

24/08/2019, 08:27

Not After

23/08/2020, 14:27

Subject

CN={62DEB899-E88E-4241-8A8F-64BAA63DC61B}

3b:0b:27:9e:53:36:8e:ca:a3:2f:bb:b4:db:9d:ae:df:a9:ad:5f:87
Signer

Actual PE Digest

3b:0b:27:9e:53:36:8e:ca:a3:2f:bb:b4:db:9d:ae:df:a9:ad:5f:87

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN={62DEB899-E88E-4241-8A8F-64BAA63DC61B}

15/05/2023, 13:26
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ENCCN.Security.Cryptography.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

4f:9b:8d:bb:48:a7:b4:a3:4c:87:c5:56:bd:f5:2d:7b
Certificate

Issuer

CN={452C091A-C222-4C4B-8850-CAFB40AC5F5A}

Not Before

15/09/2019, 14:20

Not After

14/09/2020, 20:20

Subject

CN={452C091A-C222-4C4B-8850-CAFB40AC5F5A}

a1:61:33:29:45:8d:2b:74:af:b4:78:be:79:b5:7c:3e:72:02:64:45
Signer

Actual PE Digest

a1:61:33:29:45:8d:2b:74:af:b4:78:be:79:b5:7c:3e:72:02:64:45

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN={452C091A-C222-4C4B-8850-CAFB40AC5F5A}

15/05/2023, 13:26
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ENCCN.Validators.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

23:95:9f:ed:0b:55:be:92:4e:0a:ec:9d:74:0a:11:ad
Certificate

Issuer

CN={54509282-8BE3-48DC-A375-11BF25732782}

Not Before

15/09/2019, 14:20

Not After

14/09/2020, 20:20

Subject

CN={54509282-8BE3-48DC-A375-11BF25732782}

b8:a4:c4:86:05:43:50:6c:fe:40:5f:1e:dc:a4:4f:c8:20:0a:5f:a3
Signer

Actual PE Digest

b8:a4:c4:86:05:43:50:6c:fe:40:5f:1e:dc:a4:4f:c8:20:0a:5f:a3

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN={54509282-8BE3-48DC-A375-11BF25732782}

15/05/2023, 13:26
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ENCCN.ViewModels.Converters.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

32:38:a5:c7:c9:40:eb:8c:40:f3:8f:ea:00:24:23:e2
Certificate

Issuer

CN={A09775DD-20B1-4448-A75E-7B0EB5A7A61F}

Not Before

15/09/2019, 14:21

Not After

14/09/2020, 20:21

Subject

CN={A09775DD-20B1-4448-A75E-7B0EB5A7A61F}

1d:f9:7d:d2:fb:42:c0:cb:57:7c:27:a9:59:38:f6:b3:b0:1e:87:f7
Signer

Actual PE Digest

1d:f9:7d:d2:fb:42:c0:cb:57:7c:27:a9:59:38:f6:b3:b0:1e:87:f7

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN={A09775DD-20B1-4448-A75E-7B0EB5A7A61F}

15/05/2023, 13:26
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ENCCN.ViewModels.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

3c:e6:a9:59:20:21:29:90:40:c7:a8:56:c1:11:01:1d
Certificate

Issuer

CN={3F577A21-76F4-4B36-B68E-0F803A88BC57}

Not Before

15/09/2019, 14:20

Not After

14/09/2020, 20:20

Subject

CN={3F577A21-76F4-4B36-B68E-0F803A88BC57}

0b:09:3e:a0:c6:0d:f8:b6:27:d7:5f:b1:03:d5:f3:a3:d9:57:82:0d
Signer

Actual PE Digest

0b:09:3e:a0:c6:0d:f8:b6:27:d7:5f:b1:03:d5:f3:a3:d9:57:82:0d

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN={3F577A21-76F4-4B36-B68E-0F803A88BC57}

15/05/2023, 13:26
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ENCCN_Cracked.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 7.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.zpi
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.YQ{
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.{lg
Size: 13.1MB - Virtual size: 13.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Encryptor.ECConfig
Newtonsoft.Json.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

25/10/2018, 00:00

Not After

29/10/2021, 12:00

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a7:cc:fe:41:40:99:65:07:53:c6:c7:f4:1c:e3:22:5f:f1:9e:7a:db:83:aa:c0:1c:bd:9b:44:a1:54:ff:58:a1
Signer

Actual PE Digest

a7:cc:fe:41:40:99:65:07:53:c6:c7:f4:1c:e3:22:5f:f1:9e:7a:db:83:aa:c0:1c:bd:9b:44:a1:54:ff:58:a1

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

22/04/2019, 01:06
Valid: true

Chain 1

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 649KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

77:f1:96:82:cf:9c:94:b2:48:58:d0:98:55:81:58:c9Certificate

36:c2:b8:c2:d0:ce:84:70:7c:d4:ae:06:f5:65:7a:7d:20:c9:05:1eSigner

Signature Validations

Verification

15/05/2023, 13:26 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 50KB - Virtual size: 49KB

.reloc Size: 512B - Virtual size: 12B

.rsrc Size: 1024B - Virtual size: 948B

dae02f32a21e03ce65412f6e56942daa

Code Sign

7c:08:fd:aa:61:43:ac:ae:43:7b:7f:35:67:04:23:fcCertificate

a5:5a:0b:3e:17:60:f4:55:fb:54:66:2b:10:4f:17:22:c0:ea:20:b2Signer

Signature Validations

Verification

15/05/2023, 13:26 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 44KB - Virtual size: 44KB

.reloc Size: 512B - Virtual size: 12B

.rsrc Size: 1024B - Virtual size: 948B

dae02f32a21e03ce65412f6e56942daa

Code Sign

12:ba:09:64:d8:51:2a:b7:41:a9:1e:63:f8:d3:91:a8Certificate

4e:7d:ec:91:14:4d:2d:d2:79:43:e9:55:6d:9e:1a:ad:3b:da:a4:41Signer

Signature Validations

Verification

15/05/2023, 13:26 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 47KB - Virtual size: 46KB

.reloc Size: 512B - Virtual size: 12B

.rsrc Size: 1024B - Virtual size: 948B

dae02f32a21e03ce65412f6e56942daa

Code Sign

75:bc:4f:ea:48:75:97:a5:4f:f4:6f:88:66:aa:38:e9Certificate

56:3f:7b:e6:8c:6d:8a:78:a8:4e:84:29:32:ac:4d:c6:21:41:0e:1bSigner

Signature Validations

Verification

15/05/2023, 13:26 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 157KB - Virtual size: 156KB

.reloc Size: 512B - Virtual size: 12B

.rsrc Size: 1024B - Virtual size: 964B

dae02f32a21e03ce65412f6e56942daa

Code Sign

3f:2a:fb:05:0c:f3:fa:9a:4c:b8:ef:fb:a3:c1:d5:6eCertificate

3b:0b:27:9e:53:36:8e:ca:a3:2f:bb:b4:db:9d:ae:df:a9:ad:5f:87Signer

Signature Validations

Verification

15/05/2023, 13:26 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

77:f1:96:82:cf:9c:94:b2:48:58:d0:98:55:81:58:c9
Certificate

36:c2:b8:c2:d0:ce:84:70:7c:d4:ae:06:f5:65:7a:7d:20:c9:05:1e
Signer

15/05/2023, 13:26
Valid: false

.text
Size: 50KB - Virtual size: 49KB

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 1024B - Virtual size: 948B

7c:08:fd:aa:61:43:ac:ae:43:7b:7f:35:67:04:23:fc
Certificate

a5:5a:0b:3e:17:60:f4:55:fb:54:66:2b:10:4f:17:22:c0:ea:20:b2
Signer

15/05/2023, 13:26
Valid: false

.text
Size: 44KB - Virtual size: 44KB

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 1024B - Virtual size: 948B

12:ba:09:64:d8:51:2a:b7:41:a9:1e:63:f8:d3:91:a8
Certificate

4e:7d:ec:91:14:4d:2d:d2:79:43:e9:55:6d:9e:1a:ad:3b:da:a4:41
Signer

15/05/2023, 13:26
Valid: false

.text
Size: 47KB - Virtual size: 46KB

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 1024B - Virtual size: 948B

75:bc:4f:ea:48:75:97:a5:4f:f4:6f:88:66:aa:38:e9
Certificate

56:3f:7b:e6:8c:6d:8a:78:a8:4e:84:29:32:ac:4d:c6:21:41:0e:1b
Signer

15/05/2023, 13:26
Valid: false

.text
Size: 157KB - Virtual size: 156KB

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 1024B - Virtual size: 964B

3f:2a:fb:05:0c:f3:fa:9a:4c:b8:ef:fb:a3:c1:d5:6e
Certificate

3b:0b:27:9e:53:36:8e:ca:a3:2f:bb:b4:db:9d:ae:df:a9:ad:5f:87
Signer

15/05/2023, 13:26
Valid: false

.text
Size: 372KB - Virtual size: 371KB

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 1024B - Virtual size: 916B

4f:9b:8d:bb:48:a7:b4:a3:4c:87:c5:56:bd:f5:2d:7b
Certificate

a1:61:33:29:45:8d:2b:74:af:b4:78:be:79:b5:7c:3e:72:02:64:45
Signer

15/05/2023, 13:26
Valid: false

.text
Size: 52KB - Virtual size: 52KB

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 1KB - Virtual size: 1KB

23:95:9f:ed:0b:55:be:92:4e:0a:ec:9d:74:0a:11:ad
Certificate

b8:a4:c4:86:05:43:50:6c:fe:40:5f:1e:dc:a4:4f:c8:20:0a:5f:a3
Signer

15/05/2023, 13:26
Valid: false

.text
Size: 51KB - Virtual size: 51KB

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 1024B - Virtual size: 948B

32:38:a5:c7:c9:40:eb:8c:40:f3:8f:ea:00:24:23:e2
Certificate

1d:f9:7d:d2:fb:42:c0:cb:57:7c:27:a9:59:38:f6:b3:b0:1e:87:f7
Signer

15/05/2023, 13:26
Valid: false

.text
Size: 58KB - Virtual size: 57KB

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 1KB - Virtual size: 1KB

3c:e6:a9:59:20:21:29:90:40:c7:a8:56:c1:11:01:1d
Certificate

0b:09:3e:a0:c6:0d:f8:b6:27:d7:5f:b1:03:d5:f3:a3:d9:57:82:0d
Signer

15/05/2023, 13:26
Valid: false

.text
Size: 56KB - Virtual size: 55KB

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 1024B - Virtual size: 948B