f039cfa4d175d00aa76e12ab88550ed9bb9a80e96c616f33705de733d649b619

Sharing

Copy URL Twitter E-mail

General

Target

f039cfa4d175d00aa76e12ab88550ed9bb9a80e96c616f33705de733d649b619
Size

16KB
MD5

efa686aee4a4389d2723d0ce81110651
SHA1

13c439698ad2ffbcc63b2f023432854cccde9266
SHA256

f039cfa4d175d00aa76e12ab88550ed9bb9a80e96c616f33705de733d649b619
SHA512

f380e5fb22e3f111d002d1c8624a455027feb5b95d23d4a2e36d8dfaaa151c291a8c8766176b9fd243ad48d5d657cb0be73553bd43471c4ab5066dd2ca9bfad3
SSDEEP

384:i/QQgyOl3PVDY2cNT2YtR58gwKePu5in23+tzhjsmgI:i/QQpQ3dDY2cNT2wJwKKmin23+zjb

Score

1^/10

Malware Config

Signatures

Files

f039cfa4d175d00aa76e12ab88550ed9bb9a80e96c616f33705de733d649b619
.dll windows:5 windows x86 arch:x86

f9fe250b2c8e7bb7ca4eb1e914e9baf5

Code Sign

3b:e0:de:55:c0:e6:a1:c7:fe:17:ca:1d:2f:87:73:4b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

29/02/2016, 00:00

Not After

02/08/2016, 23:59

Subject

CN=SAMSUNG SDS CO.\, LTD,O=SAMSUNG SDS CO.\, LTD,L=Seoul,ST=Gangnam-gu,C=KR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:16:c0:09:98:dc:c6:8f:a2:7d:25:c3:86:36:a8:83:bb
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

03/02/2015, 00:00

Not After

03/03/2026, 00:00

Subject

CN=GlobalSign TSA for Advanced - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

29/03/2029, 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:48:e9:b8:bc:06:90:40:bc:9c:35:94:ea:59:16:45:47:20:d1:41:5c:6b:da:1f:f9:4b:b6:df:3f:a6:a5:e7
Signer

Actual PE Digest

2b:48:e9:b8:bc:06:90:40:bc:9c:35:94:ea:59:16:45:47:20:d1:41:5c:6b:da:1f:f9:4b:b6:df:3f:a6:a5:e7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\gil\ws\git\vdimanager\Release\En_VDIManager.pdb

Imports

msvcr100

_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt

kernel32

EncodePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9fe250b2c8e7bb7ca4eb1e914e9baf5

Code Sign

3b:e0:de:55:c0:e6:a1:c7:fe:17:ca:1d:2f:87:73:4bCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

11:21:16:c0:09:98:dc:c6:8f:a2:7d:25:c3:86:36:a8:83:bbCertificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:31:89:c6:50:04Certificate

Key Usages

2b:48:e9:b8:bc:06:90:40:bc:9c:35:94:ea:59:16:45:47:20:d1:41:5c:6b:da:1f:f9:4b:b6:df:3f:a6:a5:e7Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcr100

kernel32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 856B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 344B

3b:e0:de:55:c0:e6:a1:c7:fe:17:ca:1d:2f:87:73:4b
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

11:21:16:c0:09:98:dc:c6:8f:a2:7d:25:c3:86:36:a8:83:bb
Certificate

04:00:00:00:00:01:31:89:c6:50:04
Certificate

2b:48:e9:b8:bc:06:90:40:bc:9c:35:94:ea:59:16:45:47:20:d1:41:5c:6b:da:1f:f9:4b:b6:df:3f:a6:a5:e7
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 856B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 344B