b6f842dd96bc9db3368189c2c3a34c77

Sharing

Copy URL Twitter E-mail

General

Target

b6f842dd96bc9db3368189c2c3a34c77
Size

20KB
MD5

b6f842dd96bc9db3368189c2c3a34c77
SHA1

c000e4ea1839adb951e4960f05fe439bc68a6c83
SHA256

fa0497cc431c864752f9107e9e7b6818a1b36a3ddd568871126406e94b134f02
SHA512

2d5784b0c908cdd3c8b6f50f27d76227e328e01a3ea020ebd67bc8eb57b55df249636c845978d588952a9111b969e6ae8b86c9a4b0f7bbaf32c8f3defbd421f0
SSDEEP

384:6OrxtX2gUWh1HWCxxWOWgLtWCxxWeWNhy:Prx1EWhx5HzLt53Ehy

Score

1^/10

Malware Config

Signatures

Files

b6f842dd96bc9db3368189c2c3a34c77
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

Issuer

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

10/06/2015, 13:42

Not After

10/11/2030, 14:12

Subject

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67
Certificate

Issuer

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

25/05/2020, 18:06

Not After

25/05/2021, 18:36

Subject

SERIALNUMBER=678571-9,CN=6785719 Canada Inc.,O=6785719 Canada Inc.,L=Saint Laurent,ST=Quebec,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024341

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

Issuer

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

10/06/2015, 13:42

Not After

10/11/2030, 14:12

Subject

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67
Certificate

Issuer

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

25/05/2020, 18:06

Not After

25/05/2021, 18:36

Subject

SERIALNUMBER=678571-9,CN=6785719 Canada Inc.,O=6785719 Canada Inc.,L=Saint Laurent,ST=Quebec,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024341

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f1:fa:d0:a6:bf:e4:d4:22:75:4e:89:c0:43:49:34:89:52:2a:d2:7e:05:63:c8:11:bc:ba:67:5f:25:79:91:b7
Signer

Actual PE Digest

f1:fa:d0:a6:bf:e4:d4:22:75:4e:89:c0:43:49:34:89:52:2a:d2:7e:05:63:c8:11:bc:ba:67:5f:25:79:91:b7

Digest Algorithm

sha256

PE Digest Matches

true

8e:ee:c7:bb:24:4d:cb:f8:10:46:73:36:db:b2:28:9c:6b:27:dd:95
Signer

Actual PE Digest

8e:ee:c7:bb:24:4d:cb:f8:10:46:73:36:db:b2:28:9c:6b:27:dd:95

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

87:82:52:60:00:00:00:00:51:d3:73:d9Certificate

Extended Key Usages

Key Usages

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67Certificate

Extended Key Usages

Key Usages

87:82:52:60:00:00:00:00:51:d3:73:d9Certificate

Extended Key Usages

Key Usages

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

f1:fa:d0:a6:bf:e4:d4:22:75:4e:89:c0:43:49:34:89:52:2a:d2:7e:05:63:c8:11:bc:ba:67:5f:25:79:91:b7Signer

8e:ee:c7:bb:24:4d:cb:f8:10:46:73:36:db:b2:28:9c:6b:27:dd:95Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 888B

.reloc Size: 512B - Virtual size: 12B

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67
Certificate

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

22:03:bb:3f:aa:64:06:ff:00:00:00:00:55:65:c1:67
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

f1:fa:d0:a6:bf:e4:d4:22:75:4e:89:c0:43:49:34:89:52:2a:d2:7e:05:63:c8:11:bc:ba:67:5f:25:79:91:b7
Signer

8e:ee:c7:bb:24:4d:cb:f8:10:46:73:36:db:b2:28:9c:6b:27:dd:95
Signer

.text
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 888B

.reloc
Size: 512B - Virtual size: 12B