3c9f70f2a643c56b57418943b13ee7adc428847b6c33bd24791675696f7c4969

Sharing

Copy URL

Twitter E-mail

General

Target

3c9f70f2a643c56b57418943b13ee7adc428847b6c33bd24791675696f7c4969
Size

18KB
MD5

58cddbb6f897d8542e382de098f1a13e
SHA1

5ebe6671b74ee7fd7706acea4b67351859c67517
SHA256

3c9f70f2a643c56b57418943b13ee7adc428847b6c33bd24791675696f7c4969
SHA512

6a5e6cd047689d01b09a996fb443ca15452b692bfd6f4e818f56f5e0423fe04196e805aad4566cf24a0d49f518892c26005354840f50173d369c4d91a07dd5c3
SSDEEP

384:PmrX8JzNjkm5M2mNDC7yhuC5w56SofousWu4GL:PVlmm5MhcVCysSoQuS1

Score

1^/10

Malware Config

Signatures

Files

3c9f70f2a643c56b57418943b13ee7adc428847b6c33bd24791675696f7c4969
.dll windows:6 windows x86 arch:x86

5c35aee417d6de6146b2e47234215864

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

76:8a:6a:91:ba:30:15:fa:95:c8:3e:6c:37:f2:7b:ab
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

16-06-2023 12:52

Not After

15-06-2024 12:52

Subject

CN=Open Source Developer\, Derick Payne,O=Open Source Developer,L=George,C=ZA,1.2.840.113549.1.9.1=#0c13696e666f4072697a6f6e65736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

02-11-2023 08:32

Not After

30-10-2034 08:32

Subject

CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:1c:aa:ef:b5:4b:9b:d3:48:09:ec:75:c4:fd:5c:f0:38:9b:c3:24:1a:94:44:4e:a8:07:1d:0a:0c:80:7d:ad
Signer

Actual PE Digest

0b:1c:aa:ef:b5:4b:9b:d3:48:09:ec:75:c4:fd:5c:f0:38:9b:c3:24:1a:94:44:4e:a8:07:1d:0a:0c:80:7d:ad

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Rizonesoft\Develop\Notepad3\Bin\Release_x86_v143\lng\obj\np3_en_us.pdb

Imports

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_onexit_table
_cexit
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment

kernel32

GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
UnhandledExceptionFilter
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c35aee417d6de6146b2e47234215864

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

76:8a:6a:91:ba:30:15:fa:95:c8:3e:6c:37:f2:7b:abCertificate

Extended Key Usages

Key Usages

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

0b:1c:aa:ef:b5:4b:9b:d3:48:09:ec:75:c4:fd:5c:f0:38:9b:c3:24:1a:94:44:4e:a8:07:1d:0a:0c:80:7d:adSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 976B

.rsrc Size: 512B - Virtual size: 312B

.reloc Size: 512B - Virtual size: 316B

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

76:8a:6a:91:ba:30:15:fa:95:c8:3e:6c:37:f2:7b:ab
Certificate

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

0b:1c:aa:ef:b5:4b:9b:d3:48:09:ec:75:c4:fd:5c:f0:38:9b:c3:24:1a:94:44:4e:a8:07:1d:0a:0c:80:7d:ad
Signer

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 976B

.rsrc
Size: 512B - Virtual size: 312B

.reloc
Size: 512B - Virtual size: 316B