Benign_ff9ddc10a33ac494d9b7ed3bf556e2ce097e9a88cf3184aa2059694ebb9a8065[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Benign_ff9ddc10a33ac494d9b7ed3bf556e2ce097e9a88cf3184aa2059694ebb9a8065.dll
Size

24KB
MD5

9245d185e30c29f565b3db0b2a9f1da2
SHA1

6f3eb4b7adcc56daa847a7ad2e25cacb5d212b4e
SHA256

ff9ddc10a33ac494d9b7ed3bf556e2ce097e9a88cf3184aa2059694ebb9a8065
SHA512

8c6ba491f3c0fa9e5f8f32b72caba5760c911b396baa3141e585f77743589d4e8c89f089cb69813714fa96cc9bf0f6b23e02a8931a505d8aa84528ed238a8c4b
SSDEEP

768:GZ1QsLIKri31S/ilu2uve8p/2vbwLur5AG1L1AktzT6DGQNeL:YQqiGaT

Score

1^/10

Malware Config

Signatures

Files

Benign_ff9ddc10a33ac494d9b7ed3bf556e2ce097e9a88cf3184aa2059694ebb9a8065.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:3b:d1:be:db:f2:e2:e6:18:73:00:00:00:00:01:3b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/10/2019, 23:17

Not After

21/01/2021, 23:17

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:A841-4BB4-CA93,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

0b:45:3a:97:05:93:9e:cd:4d:dd:57:33:11:a8:92:9b
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/10/2017, 00:00

Not After

24/01/2021, 12:00

Subject

CN=Xamarin Inc.,O=Xamarin Inc.,L=San Francisco,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c5:72:72:63:a8:f2:80:4c:e7:62:8d:2f:d8:2f:b0:47:4d:cc:7d:31:35:c4:d1:b3:9f:54:45:14:80:ca:c6:b6
Signer

Actual PE Digest

c5:72:72:63:a8:f2:80:4c:e7:62:8d:2f:d8:2f:b0:47:4d:cc:7d:31:35:c4:d1:b3:9f:54:45:14:80:ca:c6:b6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:3b:d1:be:db:f2:e2:e6:18:73:00:00:00:00:01:3bCertificate

Extended Key Usages

0b:45:3a:97:05:93:9e:cd:4d:dd:57:33:11:a8:92:9bCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

c5:72:72:63:a8:f2:80:4c:e7:62:8d:2f:d8:2f:b0:47:4d:cc:7d:31:35:c4:d1:b3:9f:54:45:14:80:ca:c6:b6Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 15KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:01:3b:d1:be:db:f2:e2:e6:18:73:00:00:00:00:01:3b
Certificate

0b:45:3a:97:05:93:9e:cd:4d:dd:57:33:11:a8:92:9b
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

c5:72:72:63:a8:f2:80:4c:e7:62:8d:2f:d8:2f:b0:47:4d:cc:7d:31:35:c4:d1:b3:9f:54:45:14:80:ca:c6:b6
Signer

.text
Size: 15KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B