94edbafae7e1fef0f952ac0c071a209f

Sharing

Copy URL

Twitter E-mail

General

Target

94edbafae7e1fef0f952ac0c071a209f
Size

49KB
MD5

94edbafae7e1fef0f952ac0c071a209f
SHA1

d4a8609862e2a57344ffa9780c3a47bdd1a17381
SHA256

808d4995650c4c4b2aeec8ce3dcbce22a3a48045d441335b5685a7f720f85976
SHA512

942876c124a7eae25134d691e76b6558d33836a1bde21eeca56fe8d72df9bd8c71b61a1a769c8e7db6d28b0a188a8a89b008f2293840aea63f59060d980f191d
SSDEEP

768:y9BIx5TpMEQDqtg30IWHpVxs+CER4HbI+nFVYfcIjQXHY+J:RpM3D/30A+Ck+nDY0IjQ31

Score

1^/10

Malware Config

Signatures

Files

94edbafae7e1fef0f952ac0c071a209f
.dll regsvr32 windows:6 windows x64 arch:x64

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bc:6a:18:12:e0:01:36:24:69:54:11:08:97:3b:bd:52
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

16-06-2021 00:00

Not After

16-06-2022 23:59

Subject

CN=AMCERT\,LLC,O=AMCERT\,LLC,L=Yerevan,C=AM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a7:62:eb:98:9a:0b:d5:41:d2:7c:59:0e:0f:39:ec:20:92:69:d6:26
Signer

Actual PE Digest

a7:62:eb:98:9a:0b:d5:41:d2:7c:59:0e:0f:39:ec:20:92:69:d6:26

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

DllGetClassObject
DllRegisterServer
PluginInit

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 551B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

bc:6a:18:12:e0:01:36:24:69:54:11:08:97:3b:bd:52Certificate

Extended Key Usages

Key Usages

a7:62:eb:98:9a:0b:d5:41:d2:7c:59:0e:0f:39:ec:20:92:69:d6:26Signer

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1024B - Virtual size: 551B

.data Size: 512B - Virtual size: 144B

.pdata Size: 512B - Virtual size: 156B

.tdata Size: 36KB - Virtual size: 36KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

bc:6a:18:12:e0:01:36:24:69:54:11:08:97:3b:bd:52
Certificate

a7:62:eb:98:9a:0b:d5:41:d2:7c:59:0e:0f:39:ec:20:92:69:d6:26
Signer

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1024B - Virtual size: 551B

.data
Size: 512B - Virtual size: 144B

.pdata
Size: 512B - Virtual size: 156B

.tdata
Size: 36KB - Virtual size: 36KB