3a3b4f09f11acc52a5a1f9e58c9e6848

Sharing

Copy URL

Twitter E-mail

General

Target

3a3b4f09f11acc52a5a1f9e58c9e6848
Size

20KB
MD5

3a3b4f09f11acc52a5a1f9e58c9e6848
SHA1

e32fc9ac8a289c873ce80f7d15e10232cd3993b5
SHA256

9db09aba1bdb238df54c3e460bd65558dc3ce77fa6a786c99906b25dd83c1154
SHA512

d3ae320672fc9c5fd405753beaeb5be4afa067fe4bfe3899fad951e4c7bda7eb5da0f0d87ada6652edfba73cd86840fed3fe115f3309a678b3104701be996f46
SSDEEP

384:IW4gGCqQ54Ua0h1HWCxxWOW0VnUWCxxWeWBAhg/:HofQXxhx5HFU53GAhY

Score

1^/10

Malware Config

Signatures

Files

3a3b4f09f11acc52a5a1f9e58c9e6848
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

Issuer

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

10-06-2015 13:42

Not After

10-11-2030 14:12

Subject

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67
Certificate

Issuer

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

25-05-2020 18:06

Not After

25-05-2021 18:36

Subject

SERIALNUMBER=678571-9,CN=6785719 Canada Inc.,O=6785719 Canada Inc.,L=Saint Laurent,ST=Quebec,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024341

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

Issuer

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

10-06-2015 13:42

Not After

10-11-2030 14:12

Subject

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67
Certificate

Issuer

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

25-05-2020 18:06

Not After

25-05-2021 18:36

Subject

SERIALNUMBER=678571-9,CN=6785719 Canada Inc.,O=6785719 Canada Inc.,L=Saint Laurent,ST=Quebec,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024341

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:9f:b6:f3:04:b2:7d:bf:18:7a:04:1c:aa:92:aa:ef:99:ff:85:9b:f1:e8:39:15:e7:3a:a5:bc:f1:3d:08:c7
Signer

Actual PE Digest

48:9f:b6:f3:04:b2:7d:bf:18:7a:04:1c:aa:92:aa:ef:99:ff:85:9b:f1:e8:39:15:e7:3a:a5:bc:f1:3d:08:c7

Digest Algorithm

sha256

PE Digest Matches

true

8d:6d:d7:8d:52:5a:ad:b1:7d:bb:a9:5b:a1:f9:16:97:cf:b9:8f:23
Signer

Actual PE Digest

8d:6d:d7:8d:52:5a:ad:b1:7d:bb:a9:5b:a1:f9:16:97:cf:b9:8f:23

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

87:82:52:60:00:00:00:00:51:d3:73:d9Certificate

Extended Key Usages

Key Usages

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67Certificate

Extended Key Usages

Key Usages

87:82:52:60:00:00:00:00:51:d3:73:d9Certificate

Extended Key Usages

Key Usages

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

48:9f:b6:f3:04:b2:7d:bf:18:7a:04:1c:aa:92:aa:ef:99:ff:85:9b:f1:e8:39:15:e7:3a:a5:bc:f1:3d:08:c7Signer

8d:6d:d7:8d:52:5a:ad:b1:7d:bb:a9:5b:a1:f9:16:97:cf:b9:8f:23Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 888B

.reloc Size: 512B - Virtual size: 12B

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67
Certificate

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

48:9f:b6:f3:04:b2:7d:bf:18:7a:04:1c:aa:92:aa:ef:99:ff:85:9b:f1:e8:39:15:e7:3a:a5:bc:f1:3d:08:c7
Signer

8d:6d:d7:8d:52:5a:ad:b1:7d:bb:a9:5b:a1:f9:16:97:cf:b9:8f:23
Signer

.text
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 888B

.reloc
Size: 512B - Virtual size: 12B