Leica[.]Disto[.]Networking[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Leica.Disto.Networking.dll
Size

63KB
MD5

fe2910747db03742facdaf3114f4dd1d
SHA1

a32c51b8326532c44719512a2895c6fe09aa7efe
SHA256

0e8f0bf53fa092f38f62b7c0d2ab928ea992e814fb90a905b99344f0c16fb22d
SHA512

5673d261dc19dee9f98bff4cdf1122eaf60d207eaf12ec8667e6654bf2f8c462fa40792625623e960ebe1483a72dc886e692120d3d823b73cddead0b4f5c11b8
SSDEEP

768:Xl7eGc5DU0ebwhTj3LN8yOIQHilS0/T6r14799d8/BmhJxw4:IGUDOw3LN8yzSiAZ6799d8JWxw4

Score

1^/10

Malware Config

Signatures

Files

Leica.Disto.Networking.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

05:32:65:bf:18:5e:3f:9f:5b:32:e2:d5:93:cb:7c:f4:3f:c9:bc:ae
Certificate

Issuer

CN=QuoVadis Code Signing CA G1,O=QuoVadis Limited,C=BM

Not Before

29/07/2016, 15:12

Not After

29/07/2019, 15:12

Subject

CN=EPS Software Engineering AG,O=EPS Software Engineering AG,C=CH

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1c:e6:50:7e:c1:d9:c0:b1:61:78:fe:ee:05:8c:ae:7a:0b:14:28:58
Certificate

Issuer

CN=QuoVadis Root CA 2,O=QuoVadis Limited,C=BM

Not Before

30/05/2014, 14:02

Not After

30/05/2024, 14:02

Subject

CN=QuoVadis Code Signing CA G1,O=QuoVadis Limited,C=BM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:a9:bf:38:ff:c6:c2:6b:2b:90:74:7c:33:3f:0b:26:83:5e:75:f8
Certificate

Issuer

CN=QuoVadis Root Certification Authority,OU=Root Certification Authority,O=QuoVadis Limited,C=BM

Not Before

20/02/2012, 16:25

Not After

17/03/2021, 18:33

Subject

CN=tsa01.quovadisglobal.com,OU=Time-stamp Authority+OU=nCipher DSE ESN:FBC9-3056-CE0A+OU=1.3.6.1.4.1.8024.0.2000.6.0,O=QuoVadis Limited,C=CH

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d9:e7:8c:ac:4c:34:1d:77:58:ad:45:c1:32:53:43:70:18:46:d8:cc
Signer

Actual PE Digest

d9:e7:8c:ac:4c:34:1d:77:58:ad:45:c1:32:53:43:70:18:46:d8:cc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\Skywalker\Realization\Develop\Api\Networking\obj\Release\Leica.Disto.Networking.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

05:32:65:bf:18:5e:3f:9f:5b:32:e2:d5:93:cb:7c:f4:3f:c9:bc:aeCertificate

Extended Key Usages

Key Usages

1c:e6:50:7e:c1:d9:c0:b1:61:78:fe:ee:05:8c:ae:7a:0b:14:28:58Certificate

Extended Key Usages

Key Usages

7b:a9:bf:38:ff:c6:c2:6b:2b:90:74:7c:33:3f:0b:26:83:5e:75:f8Certificate

Extended Key Usages

Key Usages

d9:e7:8c:ac:4c:34:1d:77:58:ad:45:c1:32:53:43:70:18:46:d8:ccSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 54KB - Virtual size: 54KB

.rsrc Size: 1024B - Virtual size: 976B

.reloc Size: 512B - Virtual size: 12B

05:32:65:bf:18:5e:3f:9f:5b:32:e2:d5:93:cb:7c:f4:3f:c9:bc:ae
Certificate

1c:e6:50:7e:c1:d9:c0:b1:61:78:fe:ee:05:8c:ae:7a:0b:14:28:58
Certificate

7b:a9:bf:38:ff:c6:c2:6b:2b:90:74:7c:33:3f:0b:26:83:5e:75:f8
Certificate

d9:e7:8c:ac:4c:34:1d:77:58:ad:45:c1:32:53:43:70:18:46:d8:cc
Signer

.text
Size: 54KB - Virtual size: 54KB

.rsrc
Size: 1024B - Virtual size: 976B

.reloc
Size: 512B - Virtual size: 12B