ad794a89e1fb0bfd63d31e0ba44a9690N

Sharing

Copy URL Twitter E-mail

General

Target

ad794a89e1fb0bfd63d31e0ba44a9690N
Size

126KB
MD5

ad794a89e1fb0bfd63d31e0ba44a9690
SHA1

38636c92963badc5f01b4a3afccea17be099c4dd
SHA256

7ce9e667b76c9f647e7124755bf25f56115c5ceb3a68dbdfb0254ce16aecf19e
SHA512

5d48755e0c03d7554e5924daff35c1505987664e5c5bac4f4cfb3b2df7ac74ae214dc6b1d7d778ff04579360eac86111a56467a0b4c86552669b109145972679
SSDEEP

3072:4YBSzjfI+HAOaaRH8/OhcRRY4beMDSZkXs3pMGudO:ifIcJxRHMOhO+Zkcyz0

Score

1^/10

Malware Config

Signatures

Files

ad794a89e1fb0bfd63d31e0ba44a9690N
.dll windows:4 windows x64 arch:x64

Code Sign

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2024, 20:25

Not After

19/02/2025, 20:25

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fe:9a:d0:e8:d6:7d:6d:dc:c6:db:2c:2f:25:51:10:9b:1b:51:12:7c:85:a6:9d:7e:71:1d:54:32:29:a0:09:45
Signer

Actual PE Digest

fe:9a:d0:e8:d6:7d:6d:dc:c6:db:2c:2f:25:51:10:9b:1b:51:12:7c:85:a6:9d:7e:71:1d:54:32:29:a0:09:45

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Net.Http.Json.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.Http.Json\Release\net8.0\System.Net.Http.Json.pdb

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

fe:9a:d0:e8:d6:7d:6d:dc:c6:db:2c:2f:25:51:10:9b:1b:51:12:7c:85:a6:9d:7e:71:1d:54:32:29:a0:09:45Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 92KB - Virtual size: 89KB

.data Size: 16KB - Virtual size: 14KB

.reloc Size: 4KB - Virtual size: 876B

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

fe:9a:d0:e8:d6:7d:6d:dc:c6:db:2c:2f:25:51:10:9b:1b:51:12:7c:85:a6:9d:7e:71:1d:54:32:29:a0:09:45
Signer

.text
Size: 92KB - Virtual size: 89KB

.data
Size: 16KB - Virtual size: 14KB

.reloc
Size: 4KB - Virtual size: 876B