Trainer_34580_f0fe4bf321[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Trainer_34580_f0fe4bf321.dll
Size

1.8MB
MD5

5816d99e5dabf2c9c5e380546ca38aee
SHA1

d206f6c58bb05aaf89ae259b9e5d6262816eca1c
SHA256

f0fe4bf321d3d7bc8955b144d777cd0ee70b0b716f968cc2f773895cb744e6ca
SHA512

2d113083246b1926b684561264aea91c18468efd7039e04d892cd38b0efaa8525dc388c7a5055e9b85c692ec259248ce45813e6c4bb82364b176db6764087348
SSDEEP

24576:eMuqFXNVnIjDf4I7ccSF0WSQThOD1q89JGoLtecMK6HEe8mfmlz9xm:TY74IYLSaq993Lpe8QmBu

Score

1^/10

Malware Config

Signatures

Files

Trainer_34580_f0fe4bf321.dll
.dll windows:6 windows x86 arch:x86

Code Sign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

09:ff:68:e2:f6:bd:fd:d0:a1:31:02:fa:b7:16:b2:5a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

24/01/2022, 00:00

Not After

24/04/2024, 23:59

Subject

CN=WeMod LLC,O=WeMod LLC,L=Boston,ST=Massachusetts,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

de:31:2a:6c:99:8f:c9:97:62:41:be:59:4d:83:e9:a1:d7:89:f3:00:bc:03:bb:7c:88:98:41:29:05:8a:5d:c7
Signer

Actual PE Digest

de:31:2a:6c:99:8f:c9:97:62:41:be:59:4d:83:e9:a1:d7:89:f3:00:bc:03:bb:7c:88:98:41:29:05:8a:5d:c7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Initialize

Sections

Size: 34KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 11KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wemod
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

09:ff:68:e2:f6:bd:fd:d0:a1:31:02:fa:b7:16:b2:5aCertificate

Extended Key Usages

Key Usages

de:31:2a:6c:99:8f:c9:97:62:41:be:59:4d:83:e9:a1:d7:89:f3:00:bc:03:bb:7c:88:98:41:29:05:8a:5d:c7Signer

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

Size: 34KB - Virtual size: 58KB

Size: 11KB - Virtual size: 31KB

Size: 1024B - Virtual size: 5KB

Size: 512B - Virtual size: 480B

Size: 4KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 4KB

.wemod Size: - Virtual size: 2.5MB

.boot Size: 1.7MB - Virtual size: 1.7MB

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

09:ff:68:e2:f6:bd:fd:d0:a1:31:02:fa:b7:16:b2:5a
Certificate

de:31:2a:6c:99:8f:c9:97:62:41:be:59:4d:83:e9:a1:d7:89:f3:00:bc:03:bb:7c:88:98:41:29:05:8a:5d:c7
Signer

.edata
Size: 512B - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.wemod
Size: - Virtual size: 2.5MB

.boot
Size: 1.7MB - Virtual size: 1.7MB