5d1791aace79396ca449180c64ebd350N

Sharing

Copy URL Twitter E-mail

General

Target

5d1791aace79396ca449180c64ebd350N
Size

29KB
MD5

5d1791aace79396ca449180c64ebd350
SHA1

1eeb9fc451a4bd5c513d68bc52ae9b0b7e99047d
SHA256

c4a570821b6fd07dae9ca5ef99a0b8d1221ff8ed34d785ead0700ab8a51e6133
SHA512

af893a305db7a2c6ce604999c984efd265a79e641aca8d7c6c73b82743393d5616109c204718f57fdb7c3b5a0d40cdadbedc2919663f2d8b5d2388236ddbe5fc
SSDEEP

384:QnqPu7Bv4bk+As5Zj5dDGw8JN77hhHFLPvZj5dDGhO8JN77hhHQv:Qnb8k+AubdDGT3htFLPvbdDGhJ3htQv

Score

1^/10

Malware Config

Signatures

Files

5d1791aace79396ca449180c64ebd350N
.dll windows:5 windows x64 arch:x64

Code Sign

08:e1:5c:2c:2d:50:a6:12:24:83:cd:71:35:8e:ec:35
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15/04/2019, 00:00

Not After

13/07/2022, 12:00

Subject

CN=Kofax\, Inc.,OU=it,O=Kofax\, Inc.,L=Irvine,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:e1:5c:2c:2d:50:a6:12:24:83:cd:71:35:8e:ec:35
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15/04/2019, 00:00

Not After

13/07/2022, 12:00

Subject

CN=Kofax\, Inc.,OU=it,O=Kofax\, Inc.,L=Irvine,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

b8:0c:9d:ad:3c:59:6e:f9:5b:ae:a4:0d:d3:ea:cd:9e:fe:f9:fc:ef:ec:10:12:48:03:16:ed:cc:f3:1d:28:62
Signer

Actual PE Digest

b8:0c:9d:ad:3c:59:6e:f9:5b:ae:a4:0d:d3:ea:cd:9e:fe:f9:fc:ef:ec:10:12:48:03:16:ed:cc:f3:1d:28:62

Digest Algorithm

sha256

PE Digest Matches

true

1e:af:d5:5e:e5:d6:d2:c7:77:d1:07:01:ce:db:f9:c0:47:af:bb:28
Signer

Actual PE Digest

1e:af:d5:5e:e5:d6:d2:c7:77:d1:07:01:ce:db:f9:c0:47:af:bb:28

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

08:e1:5c:2c:2d:50:a6:12:24:83:cd:71:35:8e:ec:35Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

08:e1:5c:2c:2d:50:a6:12:24:83:cd:71:35:8e:ec:35Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

b8:0c:9d:ad:3c:59:6e:f9:5b:ae:a4:0d:d3:ea:cd:9e:fe:f9:fc:ef:ec:10:12:48:03:16:ed:cc:f3:1d:28:62Signer

1e:af:d5:5e:e5:d6:d2:c7:77:d1:07:01:ce:db:f9:c0:47:af:bb:28Signer

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 15KB - Virtual size: 14KB

08:e1:5c:2c:2d:50:a6:12:24:83:cd:71:35:8e:ec:35
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

08:e1:5c:2c:2d:50:a6:12:24:83:cd:71:35:8e:ec:35
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

b8:0c:9d:ad:3c:59:6e:f9:5b:ae:a4:0d:d3:ea:cd:9e:fe:f9:fc:ef:ec:10:12:48:03:16:ed:cc:f3:1d:28:62
Signer

1e:af:d5:5e:e5:d6:d2:c7:77:d1:07:01:ce:db:f9:c0:47:af:bb:28
Signer

.rsrc
Size: 15KB - Virtual size: 14KB