77b49a30dee63be61d79aa1b5a2097dd40f743f91173e670a7e4e3f334e9a8d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77b49a30dee63be61d79aa1b5a2097dd40f743f91173e670a7e4e3f334e9a8d3
Size

28KB
MD5

28242ca362a936fc2759f40c925f6afa
SHA1

e5d939ddf7773edbf3d0bef75eeca8fc11fed633
SHA256

77b49a30dee63be61d79aa1b5a2097dd40f743f91173e670a7e4e3f334e9a8d3
SHA512

ff3905923d980170aa5c580949abb077a9aedb49b0a655b08bde4fb6c9a0f1751072538e15ce56909d0c9abd5fce8caf30054303411dec6979837c9311672219
SSDEEP

384:l6WxKWsrzBpRv8Tj89k/9QYdDBRJazY+R9zkcq:lVA+M9k/9QYd1PwYi9z+

Score

1^/10

Malware Config

Signatures

Files

77b49a30dee63be61d79aa1b5a2097dd40f743f91173e670a7e4e3f334e9a8d3
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:04:5f:f3:c9:6c:1a:7f:f7:da:1d:00:00:00:00:04:5f
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:20

Not After

14/11/2024, 19:20

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f4:28:09:7a:a5:1f:fa:91:8d:6f:8d:b6:b0:a1:57:07:8a:e5:03:47:87:9d:31:cd:6c:be:76:81:df:1c:93:f4
Signer

Actual PE Digest

f4:28:09:7a:a5:1f:fa:91:8d:6f:8d:b6:b0:a1:57:07:8a:e5:03:47:87:9d:31:cd:6c:be:76:81:df:1c:93:f4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ