d891201433c0dd4df1a83be629f03d8c30b5ff1d88710e6f41b7056c27d48fe2[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

d891201433c0dd4df1a83be629f03d8c30b5ff1d88710e6f41b7056c27d48fe2.dll
Size

294KB
MD5

59a965662088f01d6f4db88c2ed2622a
SHA1

e0858f41bc2ac452ee071eb9e097a40b185db0a0
SHA256

d891201433c0dd4df1a83be629f03d8c30b5ff1d88710e6f41b7056c27d48fe2
SHA512

bf91ad2d3f01237094bc23ba3737cb657fe62e588ceff5b63f196dd1ee49e2a0cbfc3e072ea83a9f4eda1a35edb7a73ebb5d7ef85528687234f1edf2c36509a6
SSDEEP

3072:D3FMCv2QswnoiglVVcBaQFRmgLo/0S13WCCx2gXaDd3N9eCj6YmVn/XrfbZl:jvv9sMoXBaRmr/dukbvuZ/7fH

Score

1^/10

Malware Config

Signatures

Files

d891201433c0dd4df1a83be629f03d8c30b5ff1d88710e6f41b7056c27d48fe2.dll
.dll windows:4 windows x86 arch:x86

43e5d7f630d7b07f03bf2c008cf04285

Code Sign

ac:30:7e:52:57:bb:81:4b:81:8d:36:33:b6:30:32:6f
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-11-2020 00:00

Not After

23-11-2021 23:59

Subject

CN=Aqua Direct s.r.o.,O=Aqua Direct s.r.o.,POSTALCODE=619 00,STREET=Železná 646/8,L=Brno,C=CZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01-01-2004 00:00

Not After

31-12-2028 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c0:cb:2c:88:80:ba:55:af:69:9b:06:da:21:de:cb:df:ad:39:16:0f
Signer

Actual PE Digest

c0:cb:2c:88:80:ba:55:af:69:9b:06:da:21:de:cb:df:ad:39:16:0f

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersion
LoadLibraryA
VirtualAlloc
VirtualProtect
GetProcAddress
GetCurrentThreadId
lstrlenA
lstrcatA
SetLastError
GetProcessId
GetCurrentThread
GetLastError
lstrcmpA
GetTickCount
GetCurrentProcess

gdiplus

GdipResetPathGradientTransform

winmm

mciLoadCommandResource

user32

GetProcessDefaultLayout

shlwapi

PathSetDlgItemPathW

Sections

.code
Size: 197KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

43e5d7f630d7b07f03bf2c008cf04285

Code Sign

ac:30:7e:52:57:bb:81:4b:81:8d:36:33:b6:30:32:6fCertificate

Extended Key Usages

Key Usages

01Certificate

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

c0:cb:2c:88:80:ba:55:af:69:9b:06:da:21:de:cb:df:ad:39:16:0fSigner

Headers

File Characteristics

Imports

kernel32

gdiplus

winmm

user32

shlwapi

Sections

.code Size: 197KB - Virtual size: 196KB

.data Size: 91KB - Virtual size: 90KB

ac:30:7e:52:57:bb:81:4b:81:8d:36:33:b6:30:32:6f
Certificate

01
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

c0:cb:2c:88:80:ba:55:af:69:9b:06:da:21:de:cb:df:ad:39:16:0f
Signer

.code
Size: 197KB - Virtual size: 196KB

.data
Size: 91KB - Virtual size: 90KB