68fc5dc03f7255b35a5ecbb365a6230a685f15f929f95c1299d899d8279202e8

Sharing

Copy URL

Twitter E-mail

General

Target

68fc5dc03f7255b35a5ecbb365a6230a685f15f929f95c1299d899d8279202e8
Size

18KB
MD5

ef49c50ffdf34ab3f510324d802dc458
SHA1

a2b6a3bcfffaa5057a95fb0fc21c96b29d4071a0
SHA256

68fc5dc03f7255b35a5ecbb365a6230a685f15f929f95c1299d899d8279202e8
SHA512

4ba914e92266ffeef367b7dabea44b308c4d737db01cbdd85634c3369279f20c8dfa1c6ea3f72b77f6e3b2d93a327bbf0a40a454c13ac24254b2b55dfe216144
SSDEEP

384:kn/X/9tOGWlPxYA6VFHRN7ppEpcR9zNe51:U/7wxFClvEpw9zg1

Score

1^/10

Malware Config

Signatures

Files

68fc5dc03f7255b35a5ecbb365a6230a685f15f929f95c1299d899d8279202e8
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2024 20:25

Not After

19-02-2025 20:25

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:da:6b:69:52:0a:38:13:5d:26:d8:05:72:76:17:82:09:c0:e3:ce:23:6e:0e:e7:b8:5e:09:c2:9f:da:43:09
Signer

Actual PE Digest

fb:da:6b:69:52:0a:38:13:5d:26:d8:05:72:76:17:82:09:c0:e3:ce:23:6e:0e:e7:b8:5e:09:c2:9f:da:43:09

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

fb:da:6b:69:52:0a:38:13:5d:26:d8:05:72:76:17:82:09:c0:e3:ce:23:6e:0e:e7:b8:5e:09:c2:9f:da:43:09Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 5KB - Virtual size: 5KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

fb:da:6b:69:52:0a:38:13:5d:26:d8:05:72:76:17:82:09:c0:e3:ce:23:6e:0e:e7:b8:5e:09:c2:9f:da:43:09
Signer

.text
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B