35ce6e3f7d1f36d824232c02af243a20364a3925815b938e96d67729d188490e

Sharing

Copy URL Twitter E-mail

General

Target

35ce6e3f7d1f36d824232c02af243a20364a3925815b938e96d67729d188490e
Size

19KB
MD5

3426e4ab6b1ffc78eede98e4f7a15b51
SHA1

63dd2b50600deb8af775db6cde66b6fb4a25872a
SHA256

35ce6e3f7d1f36d824232c02af243a20364a3925815b938e96d67729d188490e
SHA512

9403d9a570c620c2037796118bac98b28128a62bbf61b92516e63b5dfc4e1c01f28539eae52633f38f33e966869f7bb8cb96a4ac2b39de444d15a142351e45d4
SSDEEP

384:YiA8kWFcCu7GztH4EGdcLicKHFn5ROKRJMOT+pwKwoaVsyu/L:K8kWFcCu7GpH4EGd8ZKHF5IKRJV7SyE

Score

1^/10

Malware Config

Signatures

Files

35ce6e3f7d1f36d824232c02af243a20364a3925815b938e96d67729d188490e
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:67:27:85:09:b8:9f:d2:cf:aa:5a:85:e2:50:e3:5b
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

12/05/2022, 00:00

Not After

11/05/2025, 23:59

Subject

CN=International Telecommunications Union (ITU),O=International Telecommunications Union (ITU),ST=Genève,C=CH

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e3:e3:2a:76:e7:70:52:fc:aa:37:d1:21:3d:ef:a8:ca:b9:a0:46:c9:e6:af:0a:1d:53:73:3b:96:d6:57:59:07
Signer

Actual PE Digest

e3:e3:2a:76:e7:70:52:fc:aa:37:d1:21:3d:ef:a8:ca:b9:a0:46:c9:e6:af:0a:1d:53:73:3b:96:d6:57:59:07

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

01Certificate

Key Usages

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

90:67:27:85:09:b8:9f:d2:cf:aa:5a:85:e2:50:e3:5bCertificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

e3:e3:2a:76:e7:70:52:fc:aa:37:d1:21:3d:ef:a8:ca:b9:a0:46:c9:e6:af:0a:1d:53:73:3b:96:d6:57:59:07Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 11KB - Virtual size: 10KB

.rsrc Size: 1024B - Virtual size: 796B

.reloc Size: 512B - Virtual size: 12B

01
Certificate

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

90:67:27:85:09:b8:9f:d2:cf:aa:5a:85:e2:50:e3:5b
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

e3:e3:2a:76:e7:70:52:fc:aa:37:d1:21:3d:ef:a8:ca:b9:a0:46:c9:e6:af:0a:1d:53:73:3b:96:d6:57:59:07
Signer

.text
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 796B

.reloc
Size: 512B - Virtual size: 12B