easy_Benign_ffce82b51567184b83b6379fa50a3ebfee714685d0efd73dca8b56ad25cdc907[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

easy_Benign_ffce82b51567184b83b6379fa50a3ebfee714685d0efd73dca8b56ad25cdc907.dll
Size

24KB
MD5

afbe0a6caa5735e44da8b84a4c042c4b
SHA1

88ed00b5045a7f959ebe1d388c55dcf7946159e9
SHA256

ffce82b51567184b83b6379fa50a3ebfee714685d0efd73dca8b56ad25cdc907
SHA512

3694e7bd2ce0f276b21dc7c5a8c0e54865e49a03cb2e35b426d76e644d8242b99a98e173f36b02bab890666f0feb66f7b5c8bb9e635df5dee436b8af6590b417
SSDEEP

768:9CaP1X8S+0QvwhHaBDMPU3+Pof7SD3whT:9ZslrwhHaBJ3mofQghT

Score

1^/10

Malware Config

Signatures

Files

easy_Benign_ffce82b51567184b83b6379fa50a3ebfee714685d0efd73dca8b56ad25cdc907.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

0c:80:a2:07:fd:98:c9:92:ae:68:6d:d7:ff:de:9b:ee
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

06/03/2018, 00:00

Not After

05/05/2019, 23:59

Subject

CN=上海六界信息技术有限公司,OU=Six World Inc.,O=上海六界信息技术有限公司,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4b:71:f2:77:36:6b:10:62:11:c2:01:82:e9:60:54:a6:f9:e6:c8:f2:07:67:e8:49:23:a0:e9:38:f4:cd:60:9f
Signer

Actual PE Digest

4b:71:f2:77:36:6b:10:62:11:c2:01:82:e9:60:54:a6:f9:e6:c8:f2:07:67:e8:49:23:a0:e9:38:f4:cd:60:9f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

0c:80:a2:07:fd:98:c9:92:ae:68:6d:d7:ff:de:9b:eeCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6Certificate

Extended Key Usages

Key Usages

4b:71:f2:77:36:6b:10:62:11:c2:01:82:e9:60:54:a6:f9:e6:c8:f2:07:67:e8:49:23:a0:e9:38:f4:cd:60:9fSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 16KB - Virtual size: 15KB

.rsrc Size: 1024B - Virtual size: 936B

.reloc Size: 512B - Virtual size: 12B

0c:80:a2:07:fd:98:c9:92:ae:68:6d:d7:ff:de:9b:ee
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

4b:71:f2:77:36:6b:10:62:11:c2:01:82:e9:60:54:a6:f9:e6:c8:f2:07:67:e8:49:23:a0:e9:38:f4:cd:60:9f
Signer

.text
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 512B - Virtual size: 12B