easy_Benign_ffed4c728bba0524d2daeb3f565ea313badbe97b7ee1f53194e8f9ada5c3c5fa[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

easy_Benign_ffed4c728bba0524d2daeb3f565ea313badbe97b7ee1f53194e8f9ada5c3c5fa.dll
Size

22KB
MD5

6482d7bbed9136e36f1d8d0b3780489a
SHA1

02c0163f372e4a67d7273c6571ea82e9e6b32695
SHA256

ffed4c728bba0524d2daeb3f565ea313badbe97b7ee1f53194e8f9ada5c3c5fa
SHA512

4d56e975b7d50343da406b8ce998852fc9308c044b5fb83de28a6d75bc2dc5d42dd5052b46e88b6477f06c5662ba60335e9aecc8969a6125fe575c2a17d76dbe
SSDEEP

384:kCf9gmd18ff0UQOoEoxWXWDLIahYq6ZC8JN77hhPu:kiR3878L5Yq4t3hFu

Score

1^/10

Malware Config

Signatures

Files

easy_Benign_ffed4c728bba0524d2daeb3f565ea313badbe97b7ee1f53194e8f9ada5c3c5fa.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

e7:47:5c:65:2d:7b:37:b4:3a:ad:f6:c8:f0:3a:b2:78
Certificate

Issuer

CN=McAfee Code Signing CA 2,O=McAfee\, Inc.,L=Santa Clara,ST=CA,C=US

Not Before

04/02/2019, 00:00

Not After

03/02/2022, 23:59

Subject

CN=McAfee\, LLC.,OU=Enterprise,O=McAfee\, LLC.,POSTALCODE=95054,STREET=2821 Mission College Blvd,L=Santa Clara,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:00:35:d8:d5:59:5b:06:71:41:2b:00:00:00:00:00:35
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/08/2013, 20:26

Not After

15/08/2023, 20:36

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

13:ea:28:70:5b:f4:ec:ed:0c:36:63:09:80:61:43:36
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ca:c1:f1:dd:01:7e:80:f1:2b:4d:17:c1:69:6d:9b:a5
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

27/10/2014, 00:00

Not After

26/10/2024, 23:59

Subject

CN=McAfee Code Signing CA 2,O=McAfee\, Inc.,L=Santa Clara,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

b3:59:6e:52:19:bb:93:cb:87:c3:4c:25:a8:35:f8:83:2c:e1:bd:0b:ed:40:c2:4a:20:57:77:71:c2:cf:0f:7a
Signer

Actual PE Digest

b3:59:6e:52:19:bb:93:cb:87:c3:4c:25:a8:35:f8:83:2c:e1:bd:0b:ed:40:c2:4a:20:57:77:71:c2:cf:0f:7a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

e7:47:5c:65:2d:7b:37:b4:3a:ad:f6:c8:f0:3a:b2:78Certificate

Extended Key Usages

Key Usages

33:00:00:00:35:d8:d5:59:5b:06:71:41:2b:00:00:00:00:00:35Certificate

Extended Key Usages

Key Usages

13:ea:28:70:5b:f4:ec:ed:0c:36:63:09:80:61:43:36Certificate

Key Usages

ca:c1:f1:dd:01:7e:80:f1:2b:4d:17:c1:69:6d:9b:a5Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

b3:59:6e:52:19:bb:93:cb:87:c3:4c:25:a8:35:f8:83:2c:e1:bd:0b:ed:40:c2:4a:20:57:77:71:c2:cf:0f:7aSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 10KB - Virtual size: 9KB

.rsrc Size: 1024B - Virtual size: 856B

.reloc Size: 512B - Virtual size: 12B

e7:47:5c:65:2d:7b:37:b4:3a:ad:f6:c8:f0:3a:b2:78
Certificate

33:00:00:00:35:d8:d5:59:5b:06:71:41:2b:00:00:00:00:00:35
Certificate

13:ea:28:70:5b:f4:ec:ed:0c:36:63:09:80:61:43:36
Certificate

ca:c1:f1:dd:01:7e:80:f1:2b:4d:17:c1:69:6d:9b:a5
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

b3:59:6e:52:19:bb:93:cb:87:c3:4c:25:a8:35:f8:83:2c:e1:bd:0b:ed:40:c2:4a:20:57:77:71:c2:cf:0f:7a
Signer

.text
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 1024B - Virtual size: 856B

.reloc
Size: 512B - Virtual size: 12B