065b4c396a71157388701d35c8da4fe68cf52736a9a3f3efd7b93ec746cba5d7

Sharing

Copy URL

Twitter E-mail

General

Target

065b4c396a71157388701d35c8da4fe68cf52736a9a3f3efd7b93ec746cba5d7
Size

22KB
MD5

ceddf2a93e61af974713ee0229f1eef8
SHA1

6ffd6daabf5b5a7bbe513b8ec77863134ce701c2
SHA256

065b4c396a71157388701d35c8da4fe68cf52736a9a3f3efd7b93ec746cba5d7
SHA512

d43dc0223d3f7bbc3be342bf336aa06f63dfac0378f9591134bde84d0dcc0d3eb33d07cc24d48a7a37b5b584cb617af4ba0c703dc1afb272dfc2e6aee58dc319
SSDEEP

384:bWMxNOEL5HuOQdw/09ZHMJ9Pl4bdHRN7GoP+CcWlGssM:b6+/09Z8laG8w

Score

1^/10

Malware Config

Signatures

Files

065b4c396a71157388701d35c8da4fe68cf52736a9a3f3efd7b93ec746cba5d7
.dll windows:5 windows x64 arch:x64

Code Sign

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:39

Not After

03-03-2021 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a8:29:18:0d:db:2a:80:4a:64:c6:b3:a3:f2:a5:5f:b9:60:e2:fa:98:28:53:d1:ca:3f:37:e6:1b:37:d8:70:b5
Signer

Actual PE Digest

a8:29:18:0d:db:2a:80:4a:64:c6:b3:a3:f2:a5:5f:b9:60:e2:fa:98:28:53:d1:ca:3f:37:e6:1b:37:d8:70:b5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

PresentationFramework-SystemData.ni.pdb
/_/artifacts/obj/PresentationFramework-SystemData/x64/Release/netcoreapp3.1/PresentationFramework-SystemData.pdb

Sections

.data
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

a8:29:18:0d:db:2a:80:4a:64:c6:b3:a3:f2:a5:5f:b9:60:e2:fa:98:28:53:d1:ca:3f:37:e6:1b:37:d8:70:b5Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.data Size: 1024B - Virtual size: 624B

.text Size: 11KB - Virtual size: 11KB

.reloc Size: 512B - Virtual size: 120B

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

a8:29:18:0d:db:2a:80:4a:64:c6:b3:a3:f2:a5:5f:b9:60:e2:fa:98:28:53:d1:ca:3f:37:e6:1b:37:d8:70:b5
Signer

.data
Size: 1024B - Virtual size: 624B

.text
Size: 11KB - Virtual size: 11KB

.reloc
Size: 512B - Virtual size: 120B