d74a66336e93b4adde7c142b566989eb9abb64c9ffcd0b1228476460d0728978

Sharing

Copy URL Twitter E-mail

General

Target

d74a66336e93b4adde7c142b566989eb9abb64c9ffcd0b1228476460d0728978
Size

2.0MB
MD5

103cf84e40d4c7bf6b6babc5eb95db96
SHA1

45632c36fcda292b87d0bdc782a6a32b0bb770f0
SHA256

d74a66336e93b4adde7c142b566989eb9abb64c9ffcd0b1228476460d0728978
SHA512

fa27826c1307a33c3b15178ef56e94e393044fba96dafae039bca18d89ac5d9770b4544e95c1f3d6bc2f3b22023156577efe135fca1970a3e827b1ac43d76db8
SSDEEP

49152:FL7BRSe9Qpl3NM0Ssdt1VBmxk8eTs3SqsVTgtODPPLB2DLhHmH:tB+GHmH

Score

1^/10

Malware Config

Signatures

Files

d74a66336e93b4adde7c142b566989eb9abb64c9ffcd0b1228476460d0728978
.dll windows:4 windows x64 arch:x64

Code Sign

33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/05/2023, 19:03

Not After

08/05/2024, 19:03

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b2:53:de:56:59:d2:19:47:8e:18:d0:77:f9:32:9f:e7:ae:7c:d5:9a:bf:54:ed:f6:e6:cb:ae:5c:7d:03:88:c7
Signer

Actual PE Digest

b2:53:de:56:59:d2:19:47:8e:18:d0:77:f9:32:9f:e7:ae:7c:d5:9a:bf:54:ed:f6:e6:cb:ae:5c:7d:03:88:c7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Private.DataContractSerialization.ni.pdb
/_/artifacts/obj/System.Private.DataContractSerialization/net6.0-Release/System.Private.DataContractSerialization.pdb

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7cCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

b2:53:de:56:59:d2:19:47:8e:18:d0:77:f9:32:9f:e7:ae:7c:d5:9a:bf:54:ed:f6:e6:cb:ae:5c:7d:03:88:c7Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.data Size: 95KB - Virtual size: 95KB

.reloc Size: 8KB - Virtual size: 8KB

33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

b2:53:de:56:59:d2:19:47:8e:18:d0:77:f9:32:9f:e7:ae:7c:d5:9a:bf:54:ed:f6:e6:cb:ae:5c:7d:03:88:c7
Signer

.text
Size: 1.9MB - Virtual size: 1.9MB

.data
Size: 95KB - Virtual size: 95KB

.reloc
Size: 8KB - Virtual size: 8KB