A007 TERM BASE[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

A007 TERM BASE.rar
Size

51.4MB
MD5

60f40442be11c4e48a5d2a32096e6427
SHA1

b8d6be88f57bf9fca9b8928c0de5b0c891508d97
SHA256

23b6294e39722d3ea3dab193f97043d914e0dd5b0c9ce0e961b8c270e312fa48
SHA512

8739a5cbfbdab3e69639dccbf97c956c49343300d30eb6fdfb490393fd3a10987828494b999172f44dc42de1216c612459dfecea865f10891639342d30da711e
SSDEEP

1572864:HOIZ5CTjlp9jO4OVY4xhxUKfV4wCoPw+R/5FMVfWLiRE:HOIZ6H9jO4OBfGHwrPR1MVeLkE

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/A007 TERM BASE/A007 TERM BASE/bin/Debug/A007 Termbase.exe
unpack001/A007 TERM BASE/A007 TERM BASE/bin/Debug/Interop.Microsoft.Office.Interop.Excel.dll
unpack001/A007 TERM BASE/A007 TERM BASE/obj/Debug/A007 Termbase.exe
unpack001/A007 TERM BASE/A007 TERM BASE/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll

Files

A007 TERM BASE.rar
.rar
A007 TERM BASE/.vs/A007 TERM BASE/FileContentIndex/1f3a0973-845d-4c1c-8edf-a92e98549ab4.vsidx
A007 TERM BASE/.vs/A007 TERM BASE/FileContentIndex/3b345b7c-e274-4b33-976f-0fbfe50f1756.vsidx
A007 TERM BASE/.vs/A007 TERM BASE/FileContentIndex/46139058-338c-4e25-b3e2-cf4a8c12032e.vsidx
A007 TERM BASE/.vs/A007 TERM BASE/FileContentIndex/5801c93e-87ab-497b-9648-3abdc3fa7d71.vsidx
A007 TERM BASE/.vs/A007 TERM BASE/v17/.suo
.ps1
A007 TERM BASE/A007 TERM BASE.sln
A007 TERM BASE/A007 TERM BASE/A007 TERM BASE.csproj
A007 TERM BASE/A007 TERM BASE/App.config
A007 TERM BASE/A007 TERM BASE/Program.cs
A007 TERM BASE/A007 TERM BASE/Properties/AssemblyInfo.cs
A007 TERM BASE/A007 TERM BASE/Properties/Resources.Designer.cs
.vbs
A007 TERM BASE/A007 TERM BASE/Properties/Resources.resx
.vbs
A007 TERM BASE/A007 TERM BASE/Properties/Settings.Designer.cs
.vbs
A007 TERM BASE/A007 TERM BASE/Properties/Settings.settings
A007 TERM BASE/A007 TERM BASE/Properties/licenses.licx
A007 TERM BASE/A007 TERM BASE/Resources/133529-no-data.gif
.gif
A007 TERM BASE/A007 TERM BASE/Resources/72785-searching.gif
.gif
A007 TERM BASE/A007 TERM BASE/Resources/a007.jpg
.jpg
A007 TERM BASE/A007 TERM BASE/Resources/a007_logo.png
.png
A007 TERM BASE/A007 TERM BASE/Resources/activate.png
.png
A007 TERM BASE/A007 TERM BASE/Resources/copy.png
.png
A007 TERM BASE/A007 TERM BASE/Resources/copy_text.png
.png
A007 TERM BASE/A007 TERM BASE/Resources/deepl.png
.png
A007 TERM BASE/A007 TERM BASE/Resources/enterbtn.png
.png
A007 TERM BASE/A007 TERM BASE/Resources/glosbe.png
.png
A007 TERM BASE/A007 TERM BASE/Resources/left_arrow.png
.png
A007 TERM BASE/A007 TERM BASE/Resources/login.png
.png
A007 TERM BASE/A007 TERM BASE/Resources/refresh.png
.png
A007 TERM BASE/A007 TERM BASE/Resources/search.png
.png
A007 TERM BASE/A007 TERM BASE/Resources/search_black.png
.png
A007 TERM BASE/A007 TERM BASE/Resources/settings.png
.png
A007 TERM BASE/A007 TERM BASE/Resources/translate.png
.png
A007 TERM BASE/A007 TERM BASE/Resources/uploadbtn.png
.png
A007 TERM BASE/A007 TERM BASE/a007_logo.ico
A007 TERM BASE/A007 TERM BASE/bin/Debug/A007 Termbase.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\TermBase\A007 TERM BASE\A007 TERM BASE\obj\Debug\A007 Termbase.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A007 TERM BASE/A007 TERM BASE/bin/Debug/A007 Termbase.exe.config
A007 TERM BASE/A007 TERM BASE/bin/Debug/A007 Termbase.pdb
A007 TERM BASE/A007 TERM BASE/bin/Debug/Interop.Microsoft.Office.Interop.Excel.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A007 TERM BASE/A007 TERM BASE/bin/Debug/Microsoft.mshtml.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:04:90:0e:61:14:98:12:78:23:70:00:00:00:00:04:90
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:47

Not After

11/05/2023, 20:47

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:cf:a0:25:90:e3:13:04:ef:15:00:00:00:00:02:cf
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

97:5e:78:eb:b7:6a:c0:e8:e6:07:23:25:d4:44:1f:af:67:fe:ca:8c:52:a8:f0:52:b2:e8:7f:df:23:78:b3:76
Signer

Actual PE Digest

97:5e:78:eb:b7:6a:c0:e8:e6:07:23:25:d4:44:1f:af:67:fe:ca:8c:52:a8:f0:52:b2:e8:7f:df:23:78:b3:76

Digest Algorithm

sha256

PE Digest Matches

true

97:5e:78:eb:b7:6a:c0:e8:e6:07:23:25:d4:44:1f:af:67:fe:ca:8c:52:a8:f0:52:b2:e8:7f:df:23:78:b3:76
Signer

Actual PE Digest

97:5e:78:eb:b7:6a:c0:e8:e6:07:23:25:d4:44:1f:af:67:fe:ca:8c:52:a8:f0:52:b2:e8:7f:df:23:78:b3:76

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7.6MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A007 TERM BASE/A007 TERM BASE/bin/Debug/Newtonsoft.Json.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15/01/2021, 00:00

Not After

14/01/2046, 23:59

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15/07/2021, 00:00

Not After

14/07/2031, 23:59

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Not Before

13/08/2021, 00:00

Not After

29/10/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3a:57:8c:7c:68:8b:18:66:50:3e:ca:01:8e:c9:25:ce:98:4d:c3:92:f9:6d:09:57:64:2e:4c:79:0e:24:5a:52
Signer

Actual PE Digest

3a:57:8c:7c:68:8b:18:66:50:3e:ca:01:8e:c9:25:ce:98:4d:c3:92:f9:6d:09:57:64:2e:4c:79:0e:24:5a:52

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 681KB - Virtual size: 680KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A007 TERM BASE/A007 TERM BASE/bin/Debug/Newtonsoft.Json.xml
.xml
A007 TERM BASE/A007 TERM BASE/bin/Debug/Spire.Pdf.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ad:fb:bf:1f:d1:89:bf:26:81:11:de:aa:01:14:cb:6b
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

30/11/2022, 00:00

Not After

27/11/2025, 23:59

Subject

CN=Chengdu E-iceblue Technology Co.\, Ltd.,O=Chengdu E-iceblue Technology Co.\, Ltd.,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e6:22:0d:7b:e9:e9:48:e7:56:67:06:66:f0:8c:2e:2b:eb:c4:fc:fc
Signer

Actual PE Digest

e6:22:0d:7b:e9:e9:48:e7:56:67:06:66:f0:8c:2e:2b:eb:c4:fc:fc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20.3MB - Virtual size: 20.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A007 TERM BASE/A007 TERM BASE/bin/Debug/Spire.Pdf.xml
.xml
A007 TERM BASE/A007 TERM BASE/bin/Debug/Spire.XLS.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ad:fb:bf:1f:d1:89:bf:26:81:11:de:aa:01:14:cb:6b
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

30/11/2022, 00:00

Not After

27/11/2025, 23:59

Subject

CN=Chengdu E-iceblue Technology Co.\, Ltd.,O=Chengdu E-iceblue Technology Co.\, Ltd.,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

28:55:fe:36:1e:d6:3f:52:6e:9e:bf:d9:f3:0e:82:44:fc:60:14:6c
Signer

Actual PE Digest

28:55:fe:36:1e:d6:3f:52:6e:9e:bf:d9:f3:0e:82:44:fc:60:14:6c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14.2MB - Virtual size: 14.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A007 TERM BASE/A007 TERM BASE/bin/Debug/Spire.XLS.xml
.xml
A007 TERM BASE/A007 TERM BASE/frmAccess.Designer.cs
A007 TERM BASE/A007 TERM BASE/frmAccess.cs
A007 TERM BASE/A007 TERM BASE/frmAccess.resx
.vbs
A007 TERM BASE/A007 TERM BASE/frmLookup.Designer.cs
A007 TERM BASE/A007 TERM BASE/frmLookup.cs
.js
A007 TERM BASE/A007 TERM BASE/frmLookup.resx
.vbs
A007 TERM BASE/A007 TERM BASE/frmSearch.Designer.cs
A007 TERM BASE/A007 TERM BASE/frmSearch.cs
A007 TERM BASE/A007 TERM BASE/frmSearch.resx
.vbs
A007 TERM BASE/A007 TERM BASE/frmSplash.Designer.cs
A007 TERM BASE/A007 TERM BASE/frmSplash.cs
A007 TERM BASE/A007 TERM BASE/frmSplash.resx
.vbs
A007 TERM BASE/A007 TERM BASE/frmUpload.Designer.cs
A007 TERM BASE/A007 TERM BASE/frmUpload.cs
A007 TERM BASE/A007 TERM BASE/frmUpload.resx
.vbs
A007 TERM BASE/A007 TERM BASE/obj/Debug/.NETFramework,Version=v4.7.2.AssemblyAttributes.cs
A007 TERM BASE/A007 TERM BASE/obj/Debug/A007 TERM BASE.csproj.AssemblyReference.cache
A007 TERM BASE/A007 TERM BASE/obj/Debug/A007 TERM BASE.csproj.CoreCompileInputs.cache
A007 TERM BASE/A007 TERM BASE/obj/Debug/A007 TERM BASE.csproj.FileListAbsolute.txt
A007 TERM BASE/A007 TERM BASE/obj/Debug/A007 TERM BASE.csproj.GenerateResource.cache
A007 TERM BASE/A007 TERM BASE/obj/Debug/A007 Termbase.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\TermBase\A007 TERM BASE\A007 TERM BASE\obj\Debug\A007 Termbase.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A007 TERM BASE/A007 TERM BASE/obj/Debug/A007 Termbase.pdb
A007 TERM BASE/A007 TERM BASE/obj/Debug/A007_TERM_BASE.Properties.Resources.resources
A007 TERM BASE/A007 TERM BASE/obj/Debug/A007_TERM_BASE.frmAccess.resources
A007 TERM BASE/A007 TERM BASE/obj/Debug/A007_TERM_BASE.frmLookup.resources
A007 TERM BASE/A007 TERM BASE/obj/Debug/A007_TERM_BASE.frmSearch.resources
A007 TERM BASE/A007 TERM BASE/obj/Debug/A007_TERM_BASE.frmSplash.resources
A007 TERM BASE/A007 TERM BASE/obj/Debug/A007_TERM_BASE.frmUpload.resources
A007 TERM BASE/A007 TERM BASE/obj/Debug/DesignTimeResolveAssemblyReferences.cache
A007 TERM BASE/A007 TERM BASE/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
A007 TERM BASE/A007 TERM BASE/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A007 TERM BASE/A007 TERM BASE/obj/Debug/a007 termbase.exe.licenses
A007 TERM BASE/A007 TERM BASE/packages.config
A007 TERM BASE/A007 TERM BASE/translate.ico
A007 TERM BASE/icons/133529-no-data.gif
.gif
A007 TERM BASE/icons/72785-searching.gif
.gif
A007 TERM BASE/icons/a007_logo.ico
A007 TERM BASE/icons/a007_logo.png
.png
A007 TERM BASE/icons/activate.png
.png
A007 TERM BASE/icons/copy.png
.png
A007 TERM BASE/icons/copy_text.png
.png
A007 TERM BASE/icons/deepl.png
.png
A007 TERM BASE/icons/enterbtn.png
.png
A007 TERM BASE/icons/glosbe.png
.png
A007 TERM BASE/icons/left_arrow.png
.png
A007 TERM BASE/icons/login.png
.png
A007 TERM BASE/icons/refresh.png
.png
A007 TERM BASE/icons/search.png
.png
A007 TERM BASE/icons/search_black.png
.png
A007 TERM BASE/icons/settings.png
.png
A007 TERM BASE/icons/translate.ico
A007 TERM BASE/icons/translate.png
.png
A007 TERM BASE/icons/uploadbtn.png
.png
A007 Termbase/A007 Termbase.msi
.msi

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 3.7MB - Virtual size: 3.7MB

.rsrc Size: 132KB - Virtual size: 132KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rsrc Size: 1024B - Virtual size: 872B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:04:90:0e:61:14:98:12:78:23:70:00:00:00:00:04:90Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

33:00:00:02:cf:a0:25:90:e3:13:04:ef:15:00:00:00:00:02:cfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

97:5e:78:eb:b7:6a:c0:e8:e6:07:23:25:d4:44:1f:af:67:fe:ca:8c:52:a8:f0:52:b2:e8:7f:df:23:78:b3:76Signer

97:5e:78:eb:b7:6a:c0:e8:e6:07:23:25:d4:44:1f:af:67:fe:ca:8c:52:a8:f0:52:b2:e8:7f:df:23:78:b3:76Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 7.6MB - Virtual size: 7.6MB

.rsrc Size: 4KB - Virtual size: 888B

.reloc Size: 4KB - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20Certificate

Key Usages

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73Certificate

Extended Key Usages

Key Usages

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

3a:57:8c:7c:68:8b:18:66:50:3e:ca:01:8e:c9:25:ce:98:4d:c3:92:f9:6d:09:57:64:2e:4c:79:0e:24:5a:52Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 681KB - Virtual size: 680KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

.text
Size: 3.7MB - Virtual size: 3.7MB

.rsrc
Size: 132KB - Virtual size: 132KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 1.6MB - Virtual size: 1.6MB

.rsrc
Size: 1024B - Virtual size: 872B

.reloc
Size: 512B - Virtual size: 12B

33:00:00:04:90:0e:61:14:98:12:78:23:70:00:00:00:00:04:90
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:02:cf:a0:25:90:e3:13:04:ef:15:00:00:00:00:02:cf
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

97:5e:78:eb:b7:6a:c0:e8:e6:07:23:25:d4:44:1f:af:67:fe:ca:8c:52:a8:f0:52:b2:e8:7f:df:23:78:b3:76
Signer

97:5e:78:eb:b7:6a:c0:e8:e6:07:23:25:d4:44:1f:af:67:fe:ca:8c:52:a8:f0:52:b2:e8:7f:df:23:78:b3:76
Signer

.text
Size: 7.6MB - Virtual size: 7.6MB

.rsrc
Size: 4KB - Virtual size: 888B

.reloc
Size: 4KB - Virtual size: 12B

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Certificate

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Certificate

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

3a:57:8c:7c:68:8b:18:66:50:3e:ca:01:8e:c9:25:ce:98:4d:c3:92:f9:6d:09:57:64:2e:4c:79:0e:24:5a:52
Signer

.text
Size: 681KB - Virtual size: 680KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

ad:fb:bf:1f:d1:89:bf:26:81:11:de:aa:01:14:cb:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

e6:22:0d:7b:e9:e9:48:e7:56:67:06:66:f0:8c:2e:2b:eb:c4:fc:fc
Signer

.text
Size: 20.3MB - Virtual size: 20.3MB

.rsrc
Size: 4KB - Virtual size: 1000B

.reloc
Size: 4KB - Virtual size: 12B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

ad:fb:bf:1f:d1:89:bf:26:81:11:de:aa:01:14:cb:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

28:55:fe:36:1e:d6:3f:52:6e:9e:bf:d9:f3:0e:82:44:fc:60:14:6c
Signer

.text
Size: 14.2MB - Virtual size: 14.2MB

.rsrc
Size: 4KB - Virtual size: 1000B

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 3.7MB - Virtual size: 3.7MB

.rsrc
Size: 132KB - Virtual size: 132KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 5KB - Virtual size: 5KB

.reloc
Size: 512B - Virtual size: 12B