easy_Benign_ffadfd5ecafa8e03e901fc8b4ad9d7d4c6f1fa42570f9f18caf596f932b50724[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

easy_Benign_ffadfd5ecafa8e03e901fc8b4ad9d7d4c6f1fa42570f9f18caf596f932b50724.dll
Size

23KB
MD5

ca54e61ceed20a7c92bc780746a1fe4a
SHA1

c11f1d5cb231c1e1568ea68c44e05a6b676b2f5d
SHA256

ffadfd5ecafa8e03e901fc8b4ad9d7d4c6f1fa42570f9f18caf596f932b50724
SHA512

fdfb4152bcc25d4cc8cada5aea894c7ec63a26149904a0237beab567882a112328e458667bbb66c47cbe0c0147f288dc84bc21e060a21bbb5b55a1a2101c2beb
SSDEEP

384:bDWc/LsPH/UaGhcKG4bNTeR7NhMxEZuGohWdHCU23+tzhjst:bX/WHAGbphMIdHn23+zj

Score

1^/10

Malware Config

Signatures

Files

easy_Benign_ffadfd5ecafa8e03e901fc8b4ad9d7d4c6f1fa42570f9f18caf596f932b50724.dll
.dll windows x86

Code Sign

18:62:96:53:d5:bd:0c:a0:78:80:b0:d1:fc:d9:bd:f5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

10/04/2018, 23:59

Subject

CN=Autodesk Development Sarl,O=Autodesk Development Sarl,L=Neuchatel,ST=Neuchatel,C=CH

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:06:f1:0f:ce:68:f0:9b:fa:e5:5b:18:cd:8f:20:01:77
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for Advanced - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

29/03/2029, 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6f:34:b3:0f:ee:52:ab:59:83:06:e1:4a:0b:ae:de:3c:03:b0:a8:d5:4e:83:bf:53:de:36:62:53:05:ae:07:fd
Signer

Actual PE Digest

6f:34:b3:0f:ee:52:ab:59:83:06:e1:4a:0b:ae:de:3c:03:b0:a8:d5:4e:83:bf:53:de:36:62:53:05:ae:07:fd

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

18:62:96:53:d5:bd:0c:a0:78:80:b0:d1:fc:d9:bd:f5Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

11:21:06:f1:0f:ce:68:f0:9b:fa:e5:5b:18:cd:8f:20:01:77Certificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:31:89:c6:50:04Certificate

Key Usages

6f:34:b3:0f:ee:52:ab:59:83:06:e1:4a:0b:ae:de:3c:03:b0:a8:d5:4e:83:bf:53:de:36:62:53:05:ae:07:fdSigner

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 512B - Virtual size: 280B

.rsrc Size: 16KB - Virtual size: 15KB

18:62:96:53:d5:bd:0c:a0:78:80:b0:d1:fc:d9:bd:f5
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

11:21:06:f1:0f:ce:68:f0:9b:fa:e5:5b:18:cd:8f:20:01:77
Certificate

04:00:00:00:00:01:31:89:c6:50:04
Certificate

6f:34:b3:0f:ee:52:ab:59:83:06:e1:4a:0b:ae:de:3c:03:b0:a8:d5:4e:83:bf:53:de:36:62:53:05:ae:07:fd
Signer

.rdata
Size: 512B - Virtual size: 280B

.rsrc
Size: 16KB - Virtual size: 15KB