5306508e539aaefdddad8b0151c812d0N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

5306508e539aaefdddad8b0151c812d0N.exe
Size

72KB
MD5

5306508e539aaefdddad8b0151c812d0
SHA1

6b0464d9d762674751dd3c5bb5e24ab06eb450cf
SHA256

07339fc3b29c06e3d58cad179ae52c096ef60cd08632ccb030d4788a4ad6e2c8
SHA512

9326a9f4c500315d16518eb3e27629d66c78c0841a1d0e1e53a57c35de86eaeac44f0d370bba81689b7a3908aa4aeef2e84730edd8d4b67e0f281ebfc44f740e
SSDEEP

768:G6Hrqc22CX2HieP9Uf4Cg7ocgtukflCBUTz1Y/9nd+adEC1GQ0p8jtXag0crW7EU:G6LA92Hi/W7o/M8MRkW5s8jlaLdv7

Score

1^/10

Malware Config

Signatures

Files

5306508e539aaefdddad8b0151c812d0N.exe
.dll windows:5 windows x64 arch:x64

Code Sign

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:39

Not After

03-03-2021 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

74:4f:30:66:3d:b0:be:a1:cb:f8:10:5a:62:7e:c2:51:8d:e6:b3:e2:c9:ee:34:51:6f:69:23:9b:5d:f4:ce:87
Signer

Actual PE Digest

74:4f:30:66:3d:b0:be:a1:cb:f8:10:5a:62:7e:c2:51:8d:e6:b3:e2:c9:ee:34:51:6f:69:23:9b:5d:f4:ce:87

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.Extensions.Identity.Stores.ni.pdb
/_/artifacts/obj/Microsoft.Extensions.Identity.Stores/Release/netcoreapp3.1/Microsoft.Extensions.Identity.Stores.pdb

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

74:4f:30:66:3d:b0:be:a1:cb:f8:10:5a:62:7e:c2:51:8d:e6:b3:e2:c9:ee:34:51:6f:69:23:9b:5d:f4:ce:87Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.data Size: 2KB - Virtual size: 2KB

.text Size: 60KB - Virtual size: 59KB

.reloc Size: 512B - Virtual size: 424B

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

74:4f:30:66:3d:b0:be:a1:cb:f8:10:5a:62:7e:c2:51:8d:e6:b3:e2:c9:ee:34:51:6f:69:23:9b:5d:f4:ce:87
Signer

.data
Size: 2KB - Virtual size: 2KB

.text
Size: 60KB - Virtual size: 59KB

.reloc
Size: 512B - Virtual size: 424B