b2facb6dbb6642c30a01b3a11f8b443b8c78c785c09a6ca74d4e569d42ee06dd

Sharing

Copy URL Twitter E-mail

General

Target

b2facb6dbb6642c30a01b3a11f8b443b8c78c785c09a6ca74d4e569d42ee06dd
Size

17KB
MD5

f1c131b83aa3c1cd68f356cdef7bf69e
SHA1

fcdfcfb0b5c660095644c021d54178070d74d847
SHA256

b2facb6dbb6642c30a01b3a11f8b443b8c78c785c09a6ca74d4e569d42ee06dd
SHA512

164955e103f06d021af81d3942a88894f1cb6a5a17867ee4ce83575ec6a23f755152a540ed29455ca1a1133a9dc32c39a2bf87cd8819f40098e1213f2a60d6dc
SSDEEP

384:s9noeuczbaj7OTfzSWazuHRN7kcYR9zNlJAp6:s9noeuczbaj7Vzakn9z66

Score

1^/10

Malware Config

Signatures

Files

b2facb6dbb6642c30a01b3a11f8b443b8c78c785c09a6ca74d4e569d42ee06dd
.dll windows:6 windows x64 arch:x64

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

be:4b:07:ca:c3:e4:9c:79:92:46:a0:6f:27:41:8e:06:7f:32:42:b4:01:8b:03:13:e4:79:bc:d7:b2:f1:8a:30
Signer

Actual PE Digest

be:4b:07:ca:c3:e4:9c:79:92:46:a0:6f:27:41:8e:06:7f:32:42:b4:01:8b:03:13:e4:79:bc:d7:b2:f1:8a:30

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\140_release\vcrt_fwd_x64_release\x64\Release\vcruntime140_app.pdb

Exports

Exports

_CreateFrameInfo
_CxxThrowException
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__C_specific_handler_noexcept
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__intrinsic_setjmp
__intrinsic_setjmpex
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_InitializeCriticalSectionEx
__vcrt_LoadLibraryExW
_get_purecall_handler
_get_unexpected
_is_exception_typeof
_local_unwind
_purecall
_set_purecall_handler
_set_se_translator
longjmp
memchr
memcmp
memcpy
memmove
memset
set_unexpected
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr

Sections

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4dCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

be:4b:07:ca:c3:e4:9c:79:92:46:a0:6f:27:41:8e:06:7f:32:42:b4:01:8b:03:13:e4:79:bc:d7:b2:f1:8a:30Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Exports

Exports

Sections

.rdata Size: 5KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

be:4b:07:ca:c3:e4:9c:79:92:46:a0:6f:27:41:8e:06:7f:32:42:b4:01:8b:03:13:e4:79:bc:d7:b2:f1:8a:30
Signer

.rdata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB