11d3f3221ce56b166854bc87c7ee402d4930135eddd5279ae53d9ee3da01e126

Sharing

Copy URL Twitter E-mail

General

Target

11d3f3221ce56b166854bc87c7ee402d4930135eddd5279ae53d9ee3da01e126
Size

145KB
MD5

856dc088bc2ec7e38ff6bf2343982cea
SHA1

1052215a0bcc7e6dd50dda17a60c31a701fc993d
SHA256

11d3f3221ce56b166854bc87c7ee402d4930135eddd5279ae53d9ee3da01e126
SHA512

c464351d5974c240c86d64b5522c250fae75d83d6db4c21b67650de7c22b4a4bd0e02bd6e1e9f3358fb7db3770f5bf424a9f91472c0a49e6c4abb8a95c326c75
SSDEEP

3072:rkYrCiNGkrkbYiJyCa7AOUE54itathUzIutdnzd1HEgz8VtHacB7GJF2Ei3rrZSV:I1JXfG

Score

1^/10

Malware Config

Signatures

Files

11d3f3221ce56b166854bc87c7ee402d4930135eddd5279ae53d9ee3da01e126
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:04:60:cf:42:a9:12:31:5f:6f:b3:00:00:00:00:04:60
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:20

Not After

14/11/2024, 19:20

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

34:fe:c4:5e:1b:ee:58:ce:34:d2:3d:77:77:0f:7f:36:57:3d:4c:ad:df:b9:14:cc:a4:59:82:f6:b1:5c:fd:0a
Signer

Actual PE Digest

34:fe:c4:5e:1b:ee:58:ce:34:d2:3d:77:77:0f:7f:36:57:3d:4c:ad:df:b9:14:cc:a4:59:82:f6:b1:5c:fd:0a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

apisetschema.pdb

Sections

.rdata
Size: 4KB - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apiset
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:04:60:cf:42:a9:12:31:5f:6f:b3:00:00:00:00:04:60Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

34:fe:c4:5e:1b:ee:58:ce:34:d2:3d:77:77:0f:7f:36:57:3d:4c:ad:df:b9:14:cc:a4:59:82:f6:b1:5c:fd:0aSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 4KB - Virtual size: 436B

.data Size: - Virtual size: 128B

.apiset Size: 124KB - Virtual size: 122KB

.rsrc Size: 4KB - Virtual size: 1KB

33:00:00:04:60:cf:42:a9:12:31:5f:6f:b3:00:00:00:00:04:60
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

34:fe:c4:5e:1b:ee:58:ce:34:d2:3d:77:77:0f:7f:36:57:3d:4c:ad:df:b9:14:cc:a4:59:82:f6:b1:5c:fd:0a
Signer

.rdata
Size: 4KB - Virtual size: 436B

.data
Size: - Virtual size: 128B

.apiset
Size: 124KB - Virtual size: 122KB

.rsrc
Size: 4KB - Virtual size: 1KB