easy_Benign_ff111815368d5225c6ed19ff8ba01f0e056b7e8a3e1433a416d5358b01e8f8b5[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

easy_Benign_ff111815368d5225c6ed19ff8ba01f0e056b7e8a3e1433a416d5358b01e8f8b5.dll
Size

25KB
MD5

3889c57134ad0d65d3139cdac275c81c
SHA1

fdb8fe8a094c94dba5c9371969ffd0cf5c2b5c7c
SHA256

c7f2628c8998d40a9b1711c2fe0bfa7a29b6d289a25c9085ec3cc9ab858f15ff
SHA512

27b57ea526badeaed9ae7e03ab59d35a611f24695ff21ffa4fad49d32735567f6f79b3ff8093bd82b7d9db7570355550fe3b6ed32fbdace7b3af3a8de6492584
SSDEEP

768:tK0mrZYQu+xg5mPiVtOfOO8Vc0qwKFf1Go/k41T6DGQlT:ZfJK1RS

Score

1^/10

Malware Config

Signatures

Files

easy_Benign_ff111815368d5225c6ed19ff8ba01f0e056b7e8a3e1433a416d5358b01e8f8b5.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:3b:d1:be:db:f2:e2:e6:18:73:00:00:00:00:01:3b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/10/2019, 23:17

Not After

21/01/2021, 23:17

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:A841-4BB4-CA93,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

0b:45:3a:97:05:93:9e:cd:4d:dd:57:33:11:a8:92:9b
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/10/2017, 00:00

Not After

24/01/2021, 12:00

Subject

CN=Xamarin Inc.,O=Xamarin Inc.,L=San Francisco,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

db:44:df:6d:b6:bf:52:52:4b:ce:31:72:ca:22:31:77:fa:b5:6b:e5:5b:32:ac:0e:d8:ab:4c:f4:e0:da:b2:7f
Signer

Actual PE Digest

db:44:df:6d:b6:bf:52:52:4b:ce:31:72:ca:22:31:77:fa:b5:6b:e5:5b:32:ac:0e:d8:ab:4c:f4:e0:da:b2:7f

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:3b:d1:be:db:f2:e2:e6:18:73:00:00:00:00:01:3bCertificate

Extended Key Usages

0b:45:3a:97:05:93:9e:cd:4d:dd:57:33:11:a8:92:9bCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

db:44:df:6d:b6:bf:52:52:4b:ce:31:72:ca:22:31:77:fa:b5:6b:e5:5b:32:ac:0e:d8:ab:4c:f4:e0:da:b2:7fSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 16KB - Virtual size: 15KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:01:3b:d1:be:db:f2:e2:e6:18:73:00:00:00:00:01:3b
Certificate

0b:45:3a:97:05:93:9e:cd:4d:dd:57:33:11:a8:92:9b
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

db:44:df:6d:b6:bf:52:52:4b:ce:31:72:ca:22:31:77:fa:b5:6b:e5:5b:32:ac:0e:d8:ab:4c:f4:e0:da:b2:7f
Signer

.text
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B