99cb74c3d4cd463e64d3b567b260e5894cb8c0fcf50b002d6a531a2f24de4459

Sharing

Copy URL Twitter E-mail

General

Target

99cb74c3d4cd463e64d3b567b260e5894cb8c0fcf50b002d6a531a2f24de4459
Size

120KB
MD5

04b8454e97a1e6984d651e21b71ddfa4
SHA1

6c0646571bdd38e50b51bc8829f912af46272526
SHA256

99cb74c3d4cd463e64d3b567b260e5894cb8c0fcf50b002d6a531a2f24de4459
SHA512

b0efbc41f8615737bf25de4b177d18552479556cd20a275d89664a95cdbb892e9c9d54a44a7e63a13606879cb3cbd71026cf8a7d50a292cc6414e554f3c8ee0f
SSDEEP

3072:OE30vXdjYxupyxjhTbVLWdTr5i2fFPiCs0H:YvNCx2r5/FPimH

Score

1^/10

Malware Config

Signatures

Files

99cb74c3d4cd463e64d3b567b260e5894cb8c0fcf50b002d6a531a2f24de4459
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

26:63:d1:2b:09:d7:cb:41:58:b4:1d:7f:12:9b:81:14:32:10:1f:5b:13:71:f7:09:f5:5a:69:b1:69:a6:14:a5
Signer

Actual PE Digest

26:63:d1:2b:09:d7:cb:41:58:b4:1d:7f:12:9b:81:14:32:10:1f:5b:13:71:f7:09:f5:5a:69:b1:69:a6:14:a5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.Azure.WebJobs.Extensions.Http.ni.pdb
Microsoft.Azure.WebJobs.Extensions.Http.pdb

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:dfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

26:63:d1:2b:09:d7:cb:41:58:b4:1d:7f:12:9b:81:14:32:10:1f:5b:13:71:f7:09:f5:5a:69:b1:69:a6:14:a5Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.data Size: 3KB - Virtual size: 3KB

.text Size: 103KB - Virtual size: 102KB

.reloc Size: 4KB - Virtual size: 4KB

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

26:63:d1:2b:09:d7:cb:41:58:b4:1d:7f:12:9b:81:14:32:10:1f:5b:13:71:f7:09:f5:5a:69:b1:69:a6:14:a5
Signer

.data
Size: 3KB - Virtual size: 3KB

.text
Size: 103KB - Virtual size: 102KB

.reloc
Size: 4KB - Virtual size: 4KB