easy_Benign_ffcc0d646189bb9364d49ec721da0baee82b09159f7ed5c911d0609e4df4c45f[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

easy_Benign_ffcc0d646189bb9364d49ec721da0baee82b09159f7ed5c911d0609e4df4c45f.dll
Size

16KB
MD5

f10997737e2c08a162a02232a7bbb4ef
SHA1

0e18935414b4268012a279a937b0bd0e2110ef5e
SHA256

ffcc0d646189bb9364d49ec721da0baee82b09159f7ed5c911d0609e4df4c45f
SHA512

1bb3998f695bbbe25dbadda3d8d9f478d6532027ca5d649e2571703a132a3b18f0d02558df50c6b956dcb8d27a31765db692f4e03e5ce2c3c320ab9cb5cc89af
SSDEEP

384:7OMektBnLdbKdjWgThWOQHRN7WOqlla/o:BfLUNn8Sao

Score

1^/10

Malware Config

Signatures

Files

easy_Benign_ffcc0d646189bb9364d49ec721da0baee82b09159f7ed5c911d0609e4df4c45f.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:bb:61:b1:49:15:71:e2:72:fe:0d:80:bc:d6:a3:c8:06:84:52:81:52:d5:23:b1:2c:03:63:58:08:b7:c0:67
Signer

Actual PE Digest

33:bb:61:b1:49:15:71:e2:72:fe:0d:80:bc:d6:a3:c8:06:84:52:81:52:d5:23:b1:2c:03:63:58:08:b7:c0:67

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

33:bb:61:b1:49:15:71:e2:72:fe:0d:80:bc:d6:a3:c8:06:84:52:81:52:d5:23:b1:2c:03:63:58:08:b7:c0:67Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 5KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

33:bb:61:b1:49:15:71:e2:72:fe:0d:80:bc:d6:a3:c8:06:84:52:81:52:d5:23:b1:2c:03:63:58:08:b7:c0:67
Signer

.text
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B