easy_Benign_ffd9c459bffdf9d6fe6c5058280644d47febd8e6f565f6d45da8dbb1433a1d56[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

easy_Benign_ffd9c459bffdf9d6fe6c5058280644d47febd8e6f565f6d45da8dbb1433a1d56.dll
Size

15KB
MD5

6a2bf2a37e11ceeb2036defc002b16e3
SHA1

55cb8f956ca455624ae0aa7be4d98a9cb7430865
SHA256

ffd9c459bffdf9d6fe6c5058280644d47febd8e6f565f6d45da8dbb1433a1d56
SHA512

9a89f53aa1616ca862a2b6309d5ae350bc84f0209b98606f26cec8e3cf2f4f5234ce005c1e5ae1de6f6a25e93e2a334cc7f431efc55a380b951c3113a4c98322
SSDEEP

192:eNbfxNKO0joFQVbM4P3WPWPJWv14UgLaDyuHnhWgN7aQW5gb0+4R/HsgKqnajVuk:yNKljoF0P3WPWwc4HRN7f0N1MgKlxuv8

Score

1^/10

Malware Config

Signatures

Files

easy_Benign_ffd9c459bffdf9d6fe6c5058280644d47febd8e6f565f6d45da8dbb1433a1d56.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:03:5e:25:1c:99:1f:a3:1e:b8:00:00:00:00:01:03
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:08

Not After

26/07/2019, 20:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c9:d7:dd:5e:a9:45:fc:2c:ef:5e:c0:92:23:13:18:cc:28:9b:5f:c9:d8:73:57:38:6b:d3:96:36:3d:be:3f:64
Signer

Actual PE Digest

c9:d7:dd:5e:a9:45:fc:2c:ef:5e:c0:92:23:13:18:cc:28:9b:5f:c9:d8:73:57:38:6b:d3:96:36:3d:be:3f:64

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:03:5e:25:1c:99:1f:a3:1e:b8:00:00:00:00:01:03Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

c9:d7:dd:5e:a9:45:fc:2c:ef:5e:c0:92:23:13:18:cc:28:9b:5f:c9:d8:73:57:38:6b:d3:96:36:3d:be:3f:64Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:01:03:5e:25:1c:99:1f:a3:1e:b8:00:00:00:00:01:03
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

c9:d7:dd:5e:a9:45:fc:2c:ef:5e:c0:92:23:13:18:cc:28:9b:5f:c9:d8:73:57:38:6b:d3:96:36:3d:be:3f:64
Signer

.text
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B