8b56bf2236e0e7a3b8ca7b67ad0bf0d47f009583560314b91d120c219383bac4

Sharing

Copy URL Twitter E-mail

General

Target

8b56bf2236e0e7a3b8ca7b67ad0bf0d47f009583560314b91d120c219383bac4
Size

320KB
MD5

bcd0338ed6812a2569880dccc951bac1
SHA1

71df6a550a4aa5d63d036077d77c6bc46030247b
SHA256

8b56bf2236e0e7a3b8ca7b67ad0bf0d47f009583560314b91d120c219383bac4
SHA512

34b102517bcdfe17ae4ae4e6b6c9c80e9af348acd3b1a8a925ac84ff43a7aaa6d5b16875fa4533e9af2d60f60ed5efe5406725c1903553623d4f03d1616a9f8f
SSDEEP

768:Oph9FxtUunAeu9ib82UFW4UyKiGHiMR4dPj63/fxwPHqoFxaJ5qpEppC/GUI3T8U:G+9VM//fWqo8C/p07wFjQO2bMDl0AazF

Score

1^/10

Malware Config

Signatures

Files

8b56bf2236e0e7a3b8ca7b67ad0bf0d47f009583560314b91d120c219383bac4
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:05:4f:13:66:3c:8b:d6:7c:df:d5:00:00:00:00:05:4f
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:50

Not After

16/10/2024, 19:50

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e1:ce:33:b2:ff:48:2b:98:86:cb:25:69:f3:ad:91:5b:68:e0:09:45:99:c6:4b:24:0f:29:55:2b:c7:20:10:8f
Signer

Actual PE Digest

e1:ce:33:b2:ff:48:2b:98:86:cb:25:69:f3:ad:91:5b:68:e0:09:45:99:c6:4b:24:0f:29:55:2b:c7:20:10:8f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:05:4f:13:66:3c:8b:d6:7c:df:d5:00:00:00:00:05:4fCertificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

e1:ce:33:b2:ff:48:2b:98:86:cb:25:69:f3:ad:91:5b:68:e0:09:45:99:c6:4b:24:0f:29:55:2b:c7:20:10:8fSigner

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 512B - Virtual size: 160B

.rsrc Size: 309KB - Virtual size: 309KB

33:00:00:05:4f:13:66:3c:8b:d6:7c:df:d5:00:00:00:00:05:4f
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

e1:ce:33:b2:ff:48:2b:98:86:cb:25:69:f3:ad:91:5b:68:e0:09:45:99:c6:4b:24:0f:29:55:2b:c7:20:10:8f
Signer

.rdata
Size: 512B - Virtual size: 160B

.rsrc
Size: 309KB - Virtual size: 309KB