HarfBuzzSharp[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

HarfBuzzSharp.dll
Size

83KB
MD5

dd2a71a1ef4509c0de74aacbb3bb5f43
SHA1

faf583bf5648684441d0fcbf7e6058218180dd37
SHA256

5398adb81c28763ac90d88b3f763e43ce99f92741b6ce5144cdd9796ca069f57
SHA512

57e002de347fe4f316ed5020b56bd57b64a801abc8aa39cf7ce001cf59ca8b9bd3125083864d8688e548ff3bf6ad5d495507454fada5145dfcc116f3babf2f6f
SSDEEP

1536:G11BhOxZAY+DE+afbnAzM4xJ8GiVEoGQ8hPl+C8tgRLB3Q1W8h7:ABPDCfbn/4xJ8HuD6d7

Score

1^/10

Malware Config

Signatures

Files

HarfBuzzSharp.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:5a:8e:8f:52:c4:b1:13:59:36:00:00:00:00:01:5a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/12/2019, 01:13

Not After

17/03/2021, 01:13

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:D9DE-E39A-43FE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

0b:45:3a:97:05:93:9e:cd:4d:dd:57:33:11:a8:92:9b
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/10/2017, 00:00

Not After

24/01/2021, 12:00

Subject

CN=Xamarin Inc.,O=Xamarin Inc.,L=San Francisco,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d8:fa:0a:97:f9:5d:0a:59:4f:f1:03:6d:87:e8:47:a9:86:d4:b7:be:fc:76:ae:72:d2:61:43:d2:85:a8:07:d8
Signer

Actual PE Digest

d8:fa:0a:97:f9:5d:0a:59:4f:f1:03:6d:87:e8:47:a9:86:d4:b7:be:fc:76:ae:72:d2:61:43:d2:85:a8:07:d8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\binding\HarfBuzzSharp\obj\Release\netstandard2.0\HarfBuzzSharp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:5a:8e:8f:52:c4:b1:13:59:36:00:00:00:00:01:5aCertificate

Extended Key Usages

0b:45:3a:97:05:93:9e:cd:4d:dd:57:33:11:a8:92:9bCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

d8:fa:0a:97:f9:5d:0a:59:4f:f1:03:6d:87:e8:47:a9:86:d4:b7:be:fc:76:ae:72:d2:61:43:d2:85:a8:07:d8Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 74KB - Virtual size: 73KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:01:5a:8e:8f:52:c4:b1:13:59:36:00:00:00:00:01:5a
Certificate

0b:45:3a:97:05:93:9e:cd:4d:dd:57:33:11:a8:92:9b
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

d8:fa:0a:97:f9:5d:0a:59:4f:f1:03:6d:87:e8:47:a9:86:d4:b7:be:fc:76:ae:72:d2:61:43:d2:85:a8:07:d8
Signer

.text
Size: 74KB - Virtual size: 73KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B