39108d5d5752c8877f471902bbf2d022

Sharing

Copy URL Twitter E-mail

General

Target

39108d5d5752c8877f471902bbf2d022
Size

22KB
MD5

39108d5d5752c8877f471902bbf2d022
SHA1

1f92e2f739a06875145f1b6835e58e03fb5056b1
SHA256

1a4988b9bee2b5174d93e5176881ded9f5e8e6d80386f4304b595a30f9d32585
SHA512

9396a983c6187d63daf3d55c4371eabe528c4d78df5cbd16cb28d2787b9bca0cd05f5628845328b50233cd73bf77e340ecee79f0924b37ab1c15bdf82623ef99
SSDEEP

384:uorXmeQ8UOh1HWCxxWOWnHWCxxWeWJ0kohDE:3WeWOhx5HG53qohQ

Score

1^/10

Malware Config

Signatures

Files

39108d5d5752c8877f471902bbf2d022
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

Issuer

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

10/06/2015, 13:42

Not After

10/11/2030, 14:12

Subject

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67
Certificate

Issuer

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

25/05/2020, 18:06

Not After

25/05/2021, 18:36

Subject

SERIALNUMBER=678571-9,CN=6785719 Canada Inc.,O=6785719 Canada Inc.,L=Saint Laurent,ST=Quebec,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024341

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

Issuer

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

10/06/2015, 13:42

Not After

10/11/2030, 14:12

Subject

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67
Certificate

Issuer

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

25/05/2020, 18:06

Not After

25/05/2021, 18:36

Subject

SERIALNUMBER=678571-9,CN=6785719 Canada Inc.,O=6785719 Canada Inc.,L=Saint Laurent,ST=Quebec,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024341

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:fd:7c:1c:b5:df:d7:6c:a7:29:bf:a4:6c:66:8d:b9:f0:72:1f:bd:00:8a:a6:ba:f6:00:8d:99:a9:be:64:f7
Signer

Actual PE Digest

a0:fd:7c:1c:b5:df:d7:6c:a7:29:bf:a4:6c:66:8d:b9:f0:72:1f:bd:00:8a:a6:ba:f6:00:8d:99:a9:be:64:f7

Digest Algorithm

sha256

PE Digest Matches

true

f9:84:0c:2a:da:53:6c:a9:e9:67:ff:fa:58:46:bc:f5:dd:50:fe:61
Signer

Actual PE Digest

f9:84:0c:2a:da:53:6c:a9:e9:67:ff:fa:58:46:bc:f5:dd:50:fe:61

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

87:82:52:60:00:00:00:00:51:d3:73:d9Certificate

Extended Key Usages

Key Usages

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67Certificate

Extended Key Usages

Key Usages

87:82:52:60:00:00:00:00:51:d3:73:d9Certificate

Extended Key Usages

Key Usages

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

a0:fd:7c:1c:b5:df:d7:6c:a7:29:bf:a4:6c:66:8d:b9:f0:72:1f:bd:00:8a:a6:ba:f6:00:8d:99:a9:be:64:f7Signer

f9:84:0c:2a:da:53:6c:a9:e9:67:ff:fa:58:46:bc:f5:dd:50:fe:61Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 7KB - Virtual size: 6KB

.rsrc Size: 1024B - Virtual size: 888B

.reloc Size: 512B - Virtual size: 12B

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67
Certificate

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

a0:fd:7c:1c:b5:df:d7:6c:a7:29:bf:a4:6c:66:8d:b9:f0:72:1f:bd:00:8a:a6:ba:f6:00:8d:99:a9:be:64:f7
Signer

f9:84:0c:2a:da:53:6c:a9:e9:67:ff:fa:58:46:bc:f5:dd:50:fe:61
Signer

.text
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 1024B - Virtual size: 888B

.reloc
Size: 512B - Virtual size: 12B