Microsoft[.]Extensions[.]Configuration[.]EnvironmentVariables[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Microsoft.Extensions.Configuration.EnvironmentVariables.dll
Size

20KB
MD5

e5b4ad006560b172f6fa3662d9c6fa32
SHA1

685a01ed091a7cbe1076dd5653bead9d061aa5d9
SHA256

db25f20f8605c0afa15806b41ce1e9867551681fce4b1262415855713829cdca
SHA512

a0a83ae7afeabec37ee4415b5e510a236d67c0b6b5747318142414c50f4ae8de7cffe633a226ae23b587c55cdf24ec85ce2b95169e2cee2edb40d9e7db011b6e
SSDEEP

384:zbGfB8KFkoTlM9KozKjzNYfBe8PWUnwWOcyHRN7WEiNlOO:uYLc

Score

1^/10

Malware Config

Signatures

Files

Microsoft.Extensions.Configuration.EnvironmentVariables.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f8:24:8a:aa:82:3f:d4:99:56:66:62:00:59:b6:23:3a:8d:d4:e6:3b:a9:1b:31:5e:a4:b8:b7:7d:ea:c8:c7:53
Signer

Actual PE Digest

f8:24:8a:aa:82:3f:d4:99:56:66:62:00:59:b6:23:3a:8d:d4:e6:3b:a9:1b:31:5e:a4:b8:b7:7d:ea:c8:c7:53

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.Extensions.Configuration.EnvironmentVariables/Release/netcoreapp3.1/Microsoft.Extensions.Configuration.EnvironmentVariables.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

f8:24:8a:aa:82:3f:d4:99:56:66:62:00:59:b6:23:3a:8d:d4:e6:3b:a9:1b:31:5e:a4:b8:b7:7d:ea:c8:c7:53Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 8KB - Virtual size: 8KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

f8:24:8a:aa:82:3f:d4:99:56:66:62:00:59:b6:23:3a:8d:d4:e6:3b:a9:1b:31:5e:a4:b8:b7:7d:ea:c8:c7:53
Signer

.text
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B