0950b8233dd9503127423f9d977d06c65e179f8587b9135e79fa53208582c5ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0950b8233dd9503127423f9d977d06c65e179f8587b9135e79fa53208582c5ea
Size

31KB
MD5

d4df49843339c11cb83637edb16cecfb
SHA1

57c56eeff900cf826f304534c381d98368537e5b
SHA256

0950b8233dd9503127423f9d977d06c65e179f8587b9135e79fa53208582c5ea
SHA512

4f4a71d76cd7d882168fb79ea149b923e951ed689971dc4ec6d57dc48dca5de6fac32c7b48cc55b905ee70e2d8ff9b173ec9f6dc88cb9d7aa24194194b083d09
SSDEEP

384:NGjWkKWDrzBpRv8Tj89UfbzdQPUC+5H1zWfuAM0DBRJ/KlO8R9zdgK3Ho:N0X+M9UVpH1zWfuAM01PIOQ9zn3I

Score

1^/10

Malware Config

Signatures

Files

0950b8233dd9503127423f9d977d06c65e179f8587b9135e79fa53208582c5ea
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:04:60:cf:42:a9:12:31:5f:6f:b3:00:00:00:00:04:60
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:20

Not After

14/11/2024, 19:20

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ca:ea:ce:f6:56:7f:58:3c:42:c8:45:cb:05:23:8d:66:ed:ca:28:1b:39:2d:db:2d:85:4f:1d:e0:1a:dc:68:de
Signer

Actual PE Digest

ca:ea:ce:f6:56:7f:58:3c:42:c8:45:cb:05:23:8d:66:ed:ca:28:1b:39:2d:db:2d:85:4f:1d:e0:1a:dc:68:de

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ