316d9c3a1f6a11b165638e0d103aac545dca001e445e30f0793a0ae70112b266

Sharing

Copy URL Twitter E-mail

General

Target

316d9c3a1f6a11b165638e0d103aac545dca001e445e30f0793a0ae70112b266
Size

33KB
MD5

8a10c7ab8b343e2d579488b67c9831e1
SHA1

3cc4b9a071fdad9ce20dbd21e21c9239eacacc2c
SHA256

316d9c3a1f6a11b165638e0d103aac545dca001e445e30f0793a0ae70112b266
SHA512

464067490bdc6fef02b271d8626de2fed078afaeb6c1ed98a4a14bbddc96a4625441b1219ec0f5d6b6c7c0f70b196f023768094c9dc9edcad638e4bbfe05b7d1
SSDEEP

384:7MozCrmqDPa0rIHs53h03PGdAd/gi7nWZKx7Javmlg2JaFzgNZQxqV/jVpWJz2HQ:7Mkr+Ks53hhd0/pJpvQOSzi3Rxw9zJY+

Score

1^/10

Malware Config

Signatures

Files

316d9c3a1f6a11b165638e0d103aac545dca001e445e30f0793a0ae70112b266
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

56:df:7a:4f:82:ac:9e:bc:51:5b:8e:a4:4f:8d:ef:2e:26:2b:cb:51:56:4b:84:cc:25:91:b2:43:d5:0d:43:7d
Signer

Actual PE Digest

56:df:7a:4f:82:ac:9e:bc:51:5b:8e:a4:4f:8d:ef:2e:26:2b:cb:51:56:4b:84:cc:25:91:b2:43:d5:0d:43:7d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\obj\Release\arm64\Microsoft.Windows.Security.AccessControl.Projection\net6.0-windows10.0.17763.0\IIDOptimizer\Microsoft.Windows.Security.AccessControl.Projection.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:afCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

56:df:7a:4f:82:ac:9e:bc:51:5b:8e:a4:4f:8d:ef:2e:26:2b:cb:51:56:4b:84:cc:25:91:b2:43:d5:0d:43:7dSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 21KB - Virtual size: 20KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

56:df:7a:4f:82:ac:9e:bc:51:5b:8e:a4:4f:8d:ef:2e:26:2b:cb:51:56:4b:84:cc:25:91:b2:43:d5:0d:43:7d
Signer

.text
Size: 21KB - Virtual size: 20KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B