49982e1cc07f945760345038e849f8228ca177d5f3f52dc6b9681a06fd8a81fd

Sharing

Copy URL Twitter E-mail

General

Target

49982e1cc07f945760345038e849f8228ca177d5f3f52dc6b9681a06fd8a81fd
Size

79KB
MD5

4f315495d5e7a06da35c996de22d1aec
SHA1

bf3c990703180c95053097644c4f73db6273329c
SHA256

49982e1cc07f945760345038e849f8228ca177d5f3f52dc6b9681a06fd8a81fd
SHA512

0fd130587372dee79072dbdc1c4a4140d73e8d50539cbbae53a12852ff0268f204af51a2f0fa09a980fec33b5b7b5f4ab251da767beb8fbe6b9c6898571e9b7d
SSDEEP

1536:a8KlkCJaERjKLKQikNjwr23YBPbFQeXfRUvo:a3kCJaERjKLKQrdwZWiRZ

Score

1^/10

Malware Config

Signatures

Files

49982e1cc07f945760345038e849f8228ca177d5f3f52dc6b9681a06fd8a81fd
.dll windows:5 windows x64 arch:x64

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

27:dd:d4:4e:3b:4e:b0:5d:d5:5a:72:a4:9a:a5:23:83:03:7e:7d:bb:3e:73:b3:92:18:a5:79:49:05:fa:34:14
Signer

Actual PE Digest

27:dd:d4:4e:3b:4e:b0:5d:d5:5a:72:a4:9a:a5:23:83:03:7e:7d:bb:3e:73:b3:92:18:a5:79:49:05:fa:34:14

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.Extensions.Logging.ni.pdb
/_/artifacts/obj/Microsoft.Extensions.Logging/netstandard2.1-Release/Microsoft.Extensions.Logging.pdb

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:dfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

27:dd:d4:4e:3b:4e:b0:5d:d5:5a:72:a4:9a:a5:23:83:03:7e:7d:bb:3e:73:b3:92:18:a5:79:49:05:fa:34:14Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.data Size: 3KB - Virtual size: 3KB

.text Size: 66KB - Virtual size: 65KB

.reloc Size: 1024B - Virtual size: 544B

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

27:dd:d4:4e:3b:4e:b0:5d:d5:5a:72:a4:9a:a5:23:83:03:7e:7d:bb:3e:73:b3:92:18:a5:79:49:05:fa:34:14
Signer

.data
Size: 3KB - Virtual size: 3KB

.text
Size: 66KB - Virtual size: 65KB

.reloc
Size: 1024B - Virtual size: 544B