721e3f54d240d9374bd45e48835ec3e263548b0785f90ac4209e86a0a3fdd060

Sharing

Copy URL Twitter E-mail

General

Target

721e3f54d240d9374bd45e48835ec3e263548b0785f90ac4209e86a0a3fdd060
Size

21KB
MD5

7b07b018018bbd9cd4e28136953f2699
SHA1

f2a44c17baf70958e560d181e1ecbefaef405784
SHA256

721e3f54d240d9374bd45e48835ec3e263548b0785f90ac4209e86a0a3fdd060
SHA512

e1af465575252eddda409afbc85c86ee596f075cb70592c36360dfc689bfb935597f825f38d6d2e94defaa5c22400e3f1858d64fdd68815f702dbaa12a8fe0fb
SSDEEP

384:UHZTkXgQ2ysbe+f2Xv1IthU1M8GI9DG0Hb8JN77hhXZ:UHZTkFa3fev1IthaMWDGB3h1Z

Score

1^/10

Malware Config

Signatures

Files

721e3f54d240d9374bd45e48835ec3e263548b0785f90ac4209e86a0a3fdd060
.dll windows:6 windows x86 arch:x86

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

09:95:9f:e7:c3:8f:87:51:bc:99:fc:a2:be:9d:fb:e7
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25/11/2020, 00:00

Not After

29/11/2023, 23:59

Subject

CN=Bitdefender SRL,OU=DEVSUP CLINSTALLER,O=Bitdefender SRL,L=Bucharest,C=RO

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:5d:e2:c7:af:11:69:4f:b9:3e:8f:05:3d:a6:e9:19
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

14/12/2020, 00:00

Not After

29/11/2023, 23:59

Subject

CN=Bitdefender SRL,OU=DEVSUP CLINSTALLER,O=Bitdefender SRL,L=Bucharest,C=RO

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

3f:e8:fe:67:d8:bb:4b:8f:e7:98:5e:47:10:e5:5b:3f:8d:e2:15:77:2b:9a:d3:e9:18:b8:66:78:2f:4c:6d:3b
Signer

Actual PE Digest

3f:e8:fe:67:d8:bb:4b:8f:e7:98:5e:47:10:e5:5b:3f:8d:e2:15:77:2b:9a:d3:e9:18:b8:66:78:2f:4c:6d:3b

Digest Algorithm

sha256

PE Digest Matches

true

82:24:89:f6:24:46:e8:6b:bd:39:32:a3:d5:8d:6f:71:1b:76:5a:48
Signer

Actual PE Digest

82:24:89:f6:24:46:e8:6b:bd:39:32:a3:d5:8d:6f:71:1b:76:5a:48

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\xml-data\build-dir\CODRU-IN-SOURCES\bin\Win32\Release\Agent\lang\en-US Agent.pdb

Sections

.rdata
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

09:95:9f:e7:c3:8f:87:51:bc:99:fc:a2:be:9d:fb:e7Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

01:5d:e2:c7:af:11:69:4f:b9:3e:8f:05:3d:a6:e9:19Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

3f:e8:fe:67:d8:bb:4b:8f:e7:98:5e:47:10:e5:5b:3f:8d:e2:15:77:2b:9a:d3:e9:18:b8:66:78:2f:4c:6d:3bSigner

82:24:89:f6:24:46:e8:6b:bd:39:32:a3:d5:8d:6f:71:1b:76:5a:48Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 372B

.rsrc Size: 6KB - Virtual size: 6KB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

09:95:9f:e7:c3:8f:87:51:bc:99:fc:a2:be:9d:fb:e7
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

01:5d:e2:c7:af:11:69:4f:b9:3e:8f:05:3d:a6:e9:19
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

3f:e8:fe:67:d8:bb:4b:8f:e7:98:5e:47:10:e5:5b:3f:8d:e2:15:77:2b:9a:d3:e9:18:b8:66:78:2f:4c:6d:3b
Signer

82:24:89:f6:24:46:e8:6b:bd:39:32:a3:d5:8d:6f:71:1b:76:5a:48
Signer

.rdata
Size: 512B - Virtual size: 372B

.rsrc
Size: 6KB - Virtual size: 6KB