c0e7f5dfd66fdfe2618bdb281d5a378056ebd6c3273567292a31f5e78933940a

Sharing

Copy URL Twitter E-mail

General

Target

c0e7f5dfd66fdfe2618bdb281d5a378056ebd6c3273567292a31f5e78933940a
Size

968KB
MD5

78a740214ef839b2b01e933ed8ac41db
SHA1

9e41381ad7f72c50afa39d46bbbee73683f86a49
SHA256

c0e7f5dfd66fdfe2618bdb281d5a378056ebd6c3273567292a31f5e78933940a
SHA512

cbd73a6c1fd11130705aab249691502d48a925856d4f59507cea771cb66ac68230e32ec9ec7b96c259d3bd66f4ba3bd6d9a1321ec31404873b1aa469c8bc0638
SSDEEP

12288:7qseC0/u0NWHARP/TYzTKrJRlvdVl8ygZBKMVPd16qLBZ2VfYFGqAULNJ:7qseCl0NQARDYzc1vdQyg45YGqA2

Score

1^/10

Malware Config

Signatures

Files

c0e7f5dfd66fdfe2618bdb281d5a378056ebd6c3273567292a31f5e78933940a
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:01:d0:08:7c:3b:50:d5:ff:84:59:00:00:00:00:01:d0
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/10/2020, 18:01

Not After

31/10/2021, 18:01

Subject

CN=Microsoft 3rd Party Application Component,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

64:0e:a4:02:9e:ac:d6:8b:9d:fb:91:2c:84:16:f0:74:31:2c:40:f2:72:22:ea:69:f0:65:a8:ef:48:ad:99:dc
Signer

Actual PE Digest

64:0e:a4:02:9e:ac:d6:8b:9d:fb:91:2c:84:16:f0:74:31:2c:40:f2:72:22:ea:69:f0:65:a8:ef:48:ad:99:dc

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Marklio.Metadata.ni.pdb
D:\a\1\s\Marklio.Metadata\obj\Release\netstandard2.0\Marklio.Metadata.pdb

Sections

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 919KB - Virtual size: 919KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:01:d0:08:7c:3b:50:d5:ff:84:59:00:00:00:00:01:d0Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

64:0e:a4:02:9e:ac:d6:8b:9d:fb:91:2c:84:16:f0:74:31:2c:40:f2:72:22:ea:69:f0:65:a8:ef:48:ad:99:dcSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.data Size: 11KB - Virtual size: 11KB

.text Size: 919KB - Virtual size: 919KB

.reloc Size: 28KB - Virtual size: 28KB

33:00:00:01:d0:08:7c:3b:50:d5:ff:84:59:00:00:00:00:01:d0
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

64:0e:a4:02:9e:ac:d6:8b:9d:fb:91:2c:84:16:f0:74:31:2c:40:f2:72:22:ea:69:f0:65:a8:ef:48:ad:99:dc
Signer

.data
Size: 11KB - Virtual size: 11KB

.text
Size: 919KB - Virtual size: 919KB

.reloc
Size: 28KB - Virtual size: 28KB