SkiaSharp[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

SkiaSharp.dll
Size

388KB
MD5

975c989dbcbe9ccfe0afa05f46b6f040
SHA1

d9b2bbcf621d5e0a6197f3f89a3510a784eb3d5e
SHA256

bf630a5dc9982b7b474b7f3760ddb1cc490d3baa9be813166b8530c69c823eed
SHA512

d6cbc2dd4f31ffe927b78045669103d2a7c4fdc3706dbc074ecd624213752f9c28c311436da804266d97e6f497dd1b2a70d4d55887ccae22c6405f23919cbe41
SSDEEP

6144:sVqqP2V23erS5wGrY9RKW7oNnnTAFiH08Mvvux2U2eXJAabFBePNdaPlTQIAs2iE:PtSWO8aPGczzO6y

Score

1^/10

Malware Config

Signatures

Files

SkiaSharp.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:38:eb:79:74:9c:1b:88:f1:1d:00:00:00:00:01:38
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/10/2019, 23:17

Not After

21/01/2021, 23:17

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

0b:45:3a:97:05:93:9e:cd:4d:dd:57:33:11:a8:92:9b
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/10/2017, 00:00

Not After

24/01/2021, 12:00

Subject

CN=Xamarin Inc.,O=Xamarin Inc.,L=San Francisco,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7a:99:f4:20:da:b3:db:2e:37:91:d9:14:0d:f2:50:c5:ab:87:ea:6b:80:df:d8:50:eb:33:62:e7:b8:eb:b2:66
Signer

Actual PE Digest

7a:99:f4:20:da:b3:db:2e:37:91:d9:14:0d:f2:50:c5:ab:87:ea:6b:80:df:d8:50:eb:33:62:e7:b8:eb:b2:66

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\binding\SkiaSharp\obj\Release\netstandard2.0\SkiaSharp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 379KB - Virtual size: 379KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:38:eb:79:74:9c:1b:88:f1:1d:00:00:00:00:01:38Certificate

Extended Key Usages

0b:45:3a:97:05:93:9e:cd:4d:dd:57:33:11:a8:92:9bCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

7a:99:f4:20:da:b3:db:2e:37:91:d9:14:0d:f2:50:c5:ab:87:ea:6b:80:df:d8:50:eb:33:62:e7:b8:eb:b2:66Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 379KB - Virtual size: 379KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:01:38:eb:79:74:9c:1b:88:f1:1d:00:00:00:00:01:38
Certificate

0b:45:3a:97:05:93:9e:cd:4d:dd:57:33:11:a8:92:9b
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

7a:99:f4:20:da:b3:db:2e:37:91:d9:14:0d:f2:50:c5:ab:87:ea:6b:80:df:d8:50:eb:33:62:e7:b8:eb:b2:66
Signer

.text
Size: 379KB - Virtual size: 379KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B