8ec1abd7be3b974934f8c92f8e363a03

Sharing

Copy URL

Twitter E-mail

General

Target

8ec1abd7be3b974934f8c92f8e363a03
Size

53KB
MD5

8ec1abd7be3b974934f8c92f8e363a03
SHA1

14366a0fb5b001c7e5595da20dd47c85d37265b0
SHA256

4577e1340f659c9192ccecb6099f087d7e71773cdde470acc48c518fc0144281
SHA512

986f37a9a8323c8eb7207dd1bb60f082c96980a23ec9d84560ee0320d716d7f296b347b19e2530392448e4917ed03f0cdc3662d1882ba00813fe90d24d6143f0
SSDEEP

1536:tS8ahR1LD2DkGmMNuYcoEFvj/Z4uDizc9oA:tbahR1LD2DMKcjV4uDizc9j

Score

1^/10

Malware Config

Signatures

Files

8ec1abd7be3b974934f8c92f8e363a03
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:25:d4:d8:3c:91:8a:f2:10:ad:5e:ab:be:9f:d6:6d
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

26-07-2018 00:00

Not After

31-12-2019 12:00

Subject

CN=Lavasoft Software Canada,O=Lavasoft Software Canada,L=St-Laurent,ST=Quebec,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

56:23:fe:89:3f:c9:15:bb:5a:01:78:3a:01:9f:13:5e:bf:1a:62:3c:48:3b:69:03:5f:18:e8:5f:89:78:58:02
Signer

Actual PE Digest

56:23:fe:89:3f:c9:15:bb:5a:01:78:3a:01:9f:13:5e:bf:1a:62:3c:48:3b:69:03:5f:18:e8:5f:89:78:58:02

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Installer\Source\InstallerStealth\OfferServiceSDK\obj\Release\OfferServiceSDK.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

08:25:d4:d8:3c:91:8a:f2:10:ad:5e:ab:be:9f:d6:6dCertificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

56:23:fe:89:3f:c9:15:bb:5a:01:78:3a:01:9f:13:5e:bf:1a:62:3c:48:3b:69:03:5f:18:e8:5f:89:78:58:02Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 45KB - Virtual size: 44KB

.rsrc Size: 1024B - Virtual size: 968B

.reloc Size: 512B - Virtual size: 12B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

08:25:d4:d8:3c:91:8a:f2:10:ad:5e:ab:be:9f:d6:6d
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

56:23:fe:89:3f:c9:15:bb:5a:01:78:3a:01:9f:13:5e:bf:1a:62:3c:48:3b:69:03:5f:18:e8:5f:89:78:58:02
Signer

.text
Size: 45KB - Virtual size: 44KB

.rsrc
Size: 1024B - Virtual size: 968B

.reloc
Size: 512B - Virtual size: 12B