mscorrc[.]debug[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

mscorrc.debug.dll
Size

174KB
MD5

412c88140cc6159948c4fcb967e7ace4
SHA1

14d521deb80a5c827f43f1946ab43e7602d1c304
SHA256

f6bcdcd082f6095ced1f27ff5cb706d46e6c04cd1d9bf77a420fbcbfb9fc3075
SHA512

11525359ec633f6d8145948f4d1967b2fc04987acbbe39ab2405b3d7672e3ee83d4f817b10555823c190587e1b17a3282f1e1049c751a4ad0dbb6f221537cb41
SSDEEP

1536:hJqYpZzb8IVAkR1RhQi/s1PzHvh7xYSmUlMbcCV9jfnw5RVvZ48MSZctpoEXtVaZ:hJqYpZzgASHlMbrhnYDAS4SG4

Score

1^/10

Malware Config

Signatures

Files

mscorrc.debug.dll
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8d:88:a1:5d:c0:e0:ab:71:a3:a2:27:11:1b:f2:ac:08:de:81:ee:90:ab:45:10:2e:3b:35:76:98:01:b2:cc:04
Signer

Actual PE Digest

8d:88:a1:5d:c0:e0:ab:71:a3:a2:27:11:1b:f2:ac:08:de:81:ee:90:ab:45:10:2e:3b:35:76:98:01:b2:cc:04

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\workspace\_work\1\s\bin\obj\Windows_NT.x86.Release\src\dlls\mscorrc\full\Release\mscorrc.debug.pdb

Sections

.rdata
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

8d:88:a1:5d:c0:e0:ab:71:a3:a2:27:11:1b:f2:ac:08:de:81:ee:90:ab:45:10:2e:3b:35:76:98:01:b2:cc:04Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 316B

.rsrc Size: 164KB - Virtual size: 164KB

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

8d:88:a1:5d:c0:e0:ab:71:a3:a2:27:11:1b:f2:ac:08:de:81:ee:90:ab:45:10:2e:3b:35:76:98:01:b2:cc:04
Signer

.rdata
Size: 512B - Virtual size: 316B

.rsrc
Size: 164KB - Virtual size: 164KB