4d499a6cb6f5bc31ac5d1ad25dd3283f888907c17aa6846da16d3761777986a6

Sharing

Copy URL

Twitter E-mail

General

Target

4d499a6cb6f5bc31ac5d1ad25dd3283f888907c17aa6846da16d3761777986a6
Size

19KB
MD5

10b937bfe0a4b9759af343dbb9070596
SHA1

d9305a0015dbb8bdd28cf5898d943b4e2ed2f9f6
SHA256

4d499a6cb6f5bc31ac5d1ad25dd3283f888907c17aa6846da16d3761777986a6
SHA512

f5b0bf4418a64bec22316d16dc5f535caba9e4ede6790b555115af9089db647e7c36fbfeadb23d0aa9222059dadb4235bbec6029e99625d66d6e3a7da1aa6276
SSDEEP

192:xgdKIMFqumaRWyhWEXjbnruJPN0f7LD2oEhZnpH3GCwgEfqXyNYBTZdwm:OW7RWyhWEXnrh3b8ZpH3GCJEyyNYNnwm

Score

1^/10

Malware Config

Signatures

Files

4d499a6cb6f5bc31ac5d1ad25dd3283f888907c17aa6846da16d3761777986a6
.dll windows:10 windows x64 arch:x64

Code Sign

06:ad:81:56:59:ec:b6:b4:fa:23:b1:cc:6e:82:66:b5
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

20-03-2024 00:00

Not After

11-06-2026 23:59

Subject

CN=Eclipse.org Foundation\, Inc.,O=Eclipse.org Foundation\, Inc.,L=Ottawa,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e4:51:60:e0:79:50:94:7e:b2:80:5c:e5:4b:f6:9f:4a:49:70:ef:2f:ef:5a:ae:92:8f:14:c2:50:06:25:d1:36
Signer

Actual PE Digest

e4:51:60:e0:79:50:94:7e:b2:80:5c:e5:4b:f6:9f:4a:49:70:ef:2f:ef:5a:ae:92:8f:14:c2:50:06:25:d1:36

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-sysinfo-l1-1-0.pdb

Exports

Exports

GetComputerNameExA
GetComputerNameExW
GetLocalTime
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryW
GetTickCount
GetTickCount64
GetVersion
GetVersionExA
GetVersionExW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalMemoryStatusEx
SetLocalTime

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

06:ad:81:56:59:ec:b6:b4:fa:23:b1:cc:6e:82:66:b5Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

e4:51:60:e0:79:50:94:7e:b2:80:5c:e5:4b:f6:9f:4a:49:70:ef:2f:ef:5a:ae:92:8f:14:c2:50:06:25:d1:36Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Exports

Exports

Sections

.rdata Size: 4KB - Virtual size: 1KB

.data Size: - Virtual size: 128B

.rsrc Size: 4KB - Virtual size: 1008B

06:ad:81:56:59:ec:b6:b4:fa:23:b1:cc:6e:82:66:b5
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

e4:51:60:e0:79:50:94:7e:b2:80:5c:e5:4b:f6:9f:4a:49:70:ef:2f:ef:5a:ae:92:8f:14:c2:50:06:25:d1:36
Signer

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: - Virtual size: 128B

.rsrc
Size: 4KB - Virtual size: 1008B