1f1b97ae69c3e092dc0d8f5ad5e126f232e8ddf92982521dd663e6ba6d7b89dfN

Sharing

Copy URL Twitter E-mail

General

Target

1f1b97ae69c3e092dc0d8f5ad5e126f232e8ddf92982521dd663e6ba6d7b89dfN
Size

1.4MB
MD5

8461bef20839d11875c69ba4c2ed25d0
SHA1

e19366b4dffa6e6c63a6f680073fca862a5a0594
SHA256

1f1b97ae69c3e092dc0d8f5ad5e126f232e8ddf92982521dd663e6ba6d7b89df
SHA512

bf23751af3add4e8da6e6980ece16c90f63bd628b55192f292af662e373dc0774db56bed3e43898e6e7479c11c501be7c3827d60429605ecc7e9ef730ba389cf
SSDEEP

24576:mNJs6gdgzyxyoiqJEIpORsBFSY7/3Ja5jSQ:mXPyxyoiqJEIpOyVR6

Score

1^/10

Malware Config

Signatures

Files

1f1b97ae69c3e092dc0d8f5ad5e126f232e8ddf92982521dd663e6ba6d7b89dfN
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

07
Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

b4:03:b2:a9:46:0a:94:fc
Certificate

Issuer

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

30/08/2020, 16:45

Not After

29/10/2021, 15:34

Subject

CN=GrapeCity Inc.,O=GrapeCity Inc.,L=Pittsburgh,ST=Pennsylvania,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f1:e5:72:36:c1:21:74:f1:36:3c:38:1d:03:8e:f6:a0:d2:62:f9:33
Signer

Actual PE Digest

f1:e5:72:36:c1:21:74:f1:36:3c:38:1d:03:8e:f6:a0:d2:62:f9:33

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\BuildAgent\work\7ff2cce9c16ee77c\Staging\Obfuscated452\C1.Win.C1FlexGrid.4.5.2.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

07Certificate

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

b4:03:b2:a9:46:0a:94:fcCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

f1:e5:72:36:c1:21:74:f1:36:3c:38:1d:03:8e:f6:a0:d2:62:f9:33Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

07
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

b4:03:b2:a9:46:0a:94:fc
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

f1:e5:72:36:c1:21:74:f1:36:3c:38:1d:03:8e:f6:a0:d2:62:f9:33
Signer

.text
Size: 1.4MB - Virtual size: 1.4MB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B