1c4bc6989f09b16e11a28a05dcb496d0N

Sharing

Copy URL

Twitter E-mail

General

Target

1c4bc6989f09b16e11a28a05dcb496d0N
Size

166KB
MD5

1c4bc6989f09b16e11a28a05dcb496d0
SHA1

fe38fb3fe59224fd739c7b1d8027831dfb7696ed
SHA256

4e3f361f051dfee971b29d53bb2354accf6fc4bf61472ba568c863386251adeb
SHA512

faa4229dc787280254a9fdc119335502bcbbf0864c88d5af50ff42f1c8d7fa4403d483feb0ab848e43b579a19d50e87f32f86a9b01760303fc34bdeba3a7f29c
SSDEEP

3072:XqyaWyBtFVMOL8tu/q5LF4zxQ2VOxwQ2zr7Y1:ra7FVH2uiUtQ2VOxwQOo1

Score

1^/10

Malware Config

Signatures

Files

1c4bc6989f09b16e11a28a05dcb496d0N
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:01:1a:2f:2e:15:ee:b6:85:47:95:00:00:00:00:01:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/10/2018, 21:07

Not After

10/01/2020, 21:07

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3E7A-E359-A25D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:b1:dd:ed:ba:54:e9:65:b8:5f:00:01:00:00:01:b1
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:3b:10:df:65:17:47:51:70:ff:00:00:00:00:02:3b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

46:50:3d:a9:97:83:e4:47:ba:bc:9f:af:88:37:3d:ce:4f:89:2f:32:25:b0:92:8c:6d:99:8d:3f:f5:bc:f7:c1
Signer

Actual PE Digest

46:50:3d:a9:97:83:e4:47:ba:bc:9f:af:88:37:3d:ce:4f:89:2f:32:25:b0:92:8c:6d:99:8d:3f:f5:bc:f7:c1

Digest Algorithm

sha256

PE Digest Matches

true

6e:03:84:3a:ab:16:14:3e:f3:b1:38:52:40:e2:0f:35:8b:4f:6c:e5
Signer

Actual PE Digest

6e:03:84:3a:ab:16:14:3e:f3:b1:38:52:40:e2:0f:35:8b:4f:6c:e5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:01:1a:2f:2e:15:ee:b6:85:47:95:00:00:00:00:01:1aCertificate

Extended Key Usages

33:00:00:01:b1:dd:ed:ba:54:e9:65:b8:5f:00:01:00:00:01:b1Certificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

33:00:00:02:3b:10:df:65:17:47:51:70:ff:00:00:00:00:02:3bCertificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

46:50:3d:a9:97:83:e4:47:ba:bc:9f:af:88:37:3d:ce:4f:89:2f:32:25:b0:92:8c:6d:99:8d:3f:f5:bc:f7:c1Signer

6e:03:84:3a:ab:16:14:3e:f3:b1:38:52:40:e2:0f:35:8b:4f:6c:e5Signer

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 512B - Virtual size: 112B

.rsrc Size: 150KB - Virtual size: 149KB

33:00:00:01:1a:2f:2e:15:ee:b6:85:47:95:00:00:00:00:01:1a
Certificate

33:00:00:01:b1:dd:ed:ba:54:e9:65:b8:5f:00:01:00:00:01:b1
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:02:3b:10:df:65:17:47:51:70:ff:00:00:00:00:02:3b
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

46:50:3d:a9:97:83:e4:47:ba:bc:9f:af:88:37:3d:ce:4f:89:2f:32:25:b0:92:8c:6d:99:8d:3f:f5:bc:f7:c1
Signer

6e:03:84:3a:ab:16:14:3e:f3:b1:38:52:40:e2:0f:35:8b:4f:6c:e5
Signer

.rdata
Size: 512B - Virtual size: 112B

.rsrc
Size: 150KB - Virtual size: 149KB