366c9c613f54681af3213d83fdb6badd3e0f5a2d19d4433557630d07277684c7

Sharing

Copy URL

Twitter E-mail

General

Target

366c9c613f54681af3213d83fdb6badd3e0f5a2d19d4433557630d07277684c7
Size

50KB
MD5

21b58e9de13dd2ccea71c2745a0eadb8
SHA1

54ce52d24400fda669eba8a137ec6876a4573c3b
SHA256

366c9c613f54681af3213d83fdb6badd3e0f5a2d19d4433557630d07277684c7
SHA512

50f96387d9ee9914198525f4a1c6f57030abe24660964a6119713265ad9aa4bf9b2526312b2dd30162c9340c8a5d6b9512befc913905a62e62ad75e1ab3ad7af
SSDEEP

768:zjz1hOGhiBbjNf5oBR8LXkJ4Sjquhofr7Ex9zA:zfDhiBbJRo87kZufkjzA

Score

1^/10

Malware Config

Signatures

Files

366c9c613f54681af3213d83fdb6badd3e0f5a2d19d4433557630d07277684c7
.dll windows:4 windows x64 arch:x64

Code Sign

33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-08-2022 20:23

Not After

03-08-2023 20:23

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4f:9f:2a:dc:54:d9:ad:2f:76:ea:5a:b2:70:ad:4d:5c:73:e2:34:a2:4e:06:70:6e:c3:4a:9f:a1:19:7e:11:03
Signer

Actual PE Digest

4f:9f:2a:dc:54:d9:ad:2f:76:ea:5a:b2:70:ad:4d:5c:73:e2:34:a2:4e:06:70:6e:c3:4a:9f:a1:19:7e:11:03

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Runtime.InteropServices.JavaScript.ni.pdb
/_/artifacts/obj/System.Runtime.InteropServices.JavaScript/Release/net7.0/System.Runtime.InteropServices.JavaScript.pdb

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

4f:9f:2a:dc:54:d9:ad:2f:76:ea:5a:b2:70:ad:4d:5c:73:e2:34:a2:4e:06:70:6e:c3:4a:9f:a1:19:7e:11:03Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 28KB - Virtual size: 25KB

.data Size: 4KB - Virtual size: 848B

.reloc Size: 4KB - Virtual size: 60B

33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

4f:9f:2a:dc:54:d9:ad:2f:76:ea:5a:b2:70:ad:4d:5c:73:e2:34:a2:4e:06:70:6e:c3:4a:9f:a1:19:7e:11:03
Signer

.text
Size: 28KB - Virtual size: 25KB

.data
Size: 4KB - Virtual size: 848B

.reloc
Size: 4KB - Virtual size: 60B