6e4efd9df44f9a0a514cdfb52cbee5c2d4397d17cea2ae348e5d97cd52c40bc5

Sharing

Copy URL Twitter E-mail

General

Target

6e4efd9df44f9a0a514cdfb52cbee5c2d4397d17cea2ae348e5d97cd52c40bc5
Size

428KB
MD5

8c7da148d1cf63c2d37a2824f35abb20
SHA1

36f32260f0be1b7c51f43e6515c91a22308722aa
SHA256

6e4efd9df44f9a0a514cdfb52cbee5c2d4397d17cea2ae348e5d97cd52c40bc5
SHA512

ba294a5b7189a3c34fc56528df06e0f50d2f0aa98c3833aef8c7a4a045bcb7ff2a3effbbe6459e75299044d5256dfff2830c4106467f1c05df59be6cc887f569
SSDEEP

3072:Xg/zBJKWF9GJtCmxx/Nfh+KF2cRgfwl+DIG1liANY1/fx:XgcMSVROwlWWx

Score

1^/10

Malware Config

Signatures

Files

6e4efd9df44f9a0a514cdfb52cbee5c2d4397d17cea2ae348e5d97cd52c40bc5
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:e8:67:e8:ea:ae:f2:11:1d:85:db:74
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

02/12/2022, 13:29

Not After

02/12/2024, 13:29

Subject

CN=Kolibri LLC,O=Kolibri LLC,L=Krasnogorsk,ST=Moskovskaya oblast,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

02/11/2023, 10:30

Not After

04/12/2034, 10:30

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

81:ff:a0:04:b4:08:b3:9e:a5:76:4b:bd:e2:fa:6e:30:2f:32:79:d8
Signer

Actual PE Digest

81:ff:a0:04:b4:08:b3:9e:a5:76:4b:bd:e2:fa:6e:30:2f:32:79:d8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Source\whois\Whois\obj\Release\net452\netstandard2.0\Whois.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 416KB - Virtual size: 415KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47Certificate

Extended Key Usages

Key Usages

06:e8:67:e8:ea:ae:f2:11:1d:85:db:74Certificate

Extended Key Usages

Key Usages

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15Certificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

81:ff:a0:04:b4:08:b3:9e:a5:76:4b:bd:e2:fa:6e:30:2f:32:79:d8Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 416KB - Virtual size: 415KB

.rsrc Size: 1024B - Virtual size: 976B

.reloc Size: 512B - Virtual size: 12B

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

06:e8:67:e8:ea:ae:f2:11:1d:85:db:74
Certificate

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

81:ff:a0:04:b4:08:b3:9e:a5:76:4b:bd:e2:fa:6e:30:2f:32:79:d8
Signer

.text
Size: 416KB - Virtual size: 415KB

.rsrc
Size: 1024B - Virtual size: 976B

.reloc
Size: 512B - Virtual size: 12B