14c68463ab43820e1c3948c47ec18ddaa43d7b92dac676559252e7d4ba820aa2

Sharing

Copy URL Twitter E-mail

General

Target

14c68463ab43820e1c3948c47ec18ddaa43d7b92dac676559252e7d4ba820aa2
Size

225KB
MD5

933b4b3ff0a4ebc4bfd3965dbb14c04b
SHA1

c9d81317e4ecfedba340c4e30a94f5fe3b7e4b15
SHA256

14c68463ab43820e1c3948c47ec18ddaa43d7b92dac676559252e7d4ba820aa2
SHA512

02da3cec351a6c4ad2d45fc3baa1e335c5fdeb3ae36af071e45e410e24c66f23c55a50c4c833cd0d1ab23f35f5b09d56e30a852cd49fe0cb8059fe345c03c7c7
SSDEEP

6144:D6n0hhQLAIN3TZ0b69lgbdTwdRiksjIwKtM33d+dCMfMPMhMpENpQxxHwugtvRmL:DFBG2w0aLiBJ

Score

1^/10

Malware Config

Signatures

Files

14c68463ab43820e1c3948c47ec18ddaa43d7b92dac676559252e7d4ba820aa2
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

df:f5:e5:ea:0a:39:8c:e9:95:ce:20:0a:84:55:79:73:d2:03:e8:61:d5:f0:b6:7d:40:05:d8:8c:d5:eb:37:a7
Signer

Actual PE Digest

df:f5:e5:ea:0a:39:8c:e9:95:ce:20:0a:84:55:79:73:d2:03:e8:61:d5:f0:b6:7d:40:05:d8:8c:d5:eb:37:a7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.Private.Uri.ni.pdb
System.Private.Uri.pdb

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:ccCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

df:f5:e5:ea:0a:39:8c:e9:95:ce:20:0a:84:55:79:73:d2:03:e8:61:d5:f0:b6:7d:40:05:d8:8c:d5:eb:37:a7Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.data Size: 2KB - Virtual size: 1KB

.text Size: 208KB - Virtual size: 207KB

.reloc Size: 5KB - Virtual size: 4KB

33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

df:f5:e5:ea:0a:39:8c:e9:95:ce:20:0a:84:55:79:73:d2:03:e8:61:d5:f0:b6:7d:40:05:d8:8c:d5:eb:37:a7
Signer

.data
Size: 2KB - Virtual size: 1KB

.text
Size: 208KB - Virtual size: 207KB

.reloc
Size: 5KB - Virtual size: 4KB