c22e1d14bd1f5f1306636ec0d6a78f3537780ca57e7143e95624b5ce58389d96[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

c22e1d14bd1f5f1306636ec0d6a78f3537780ca57e7143e95624b5ce58389d96.dll
Size

5.7MB
MD5

514c2aa1d71decb732ddf579cd88356c
SHA1

d87dbb7e712a0a7ef6c6bea368b72c17a9f6ac59
SHA256

c22e1d14bd1f5f1306636ec0d6a78f3537780ca57e7143e95624b5ce58389d96
SHA512

af30d3b762893ed17a418d428c0b248cf1ea2db23993de0b50102d61cce5583a4f5748b285be1640eaab6d7d6fa303188139e7d834ffe6b89b3b75cebf66da8f
SSDEEP

49152:/0oL54cPedTLBzjP+ZVX+xIPbVZU2K7We7IRewFhu86RuY:/0VcgCNuIhZUwRR6Rn

Score

1^/10

Malware Config

Signatures

Files

c22e1d14bd1f5f1306636ec0d6a78f3537780ca57e7143e95624b5ce58389d96.dll
.dll windows:6 windows x86 arch:x86

4e10231abb37406ce7202dc3de7e2172

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ef:cb:e3:90:ef:8c:38:3f:b9:75:2c:9b:5f:8a:86:88
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

08-02-2021 00:00

Not After

08-02-2023 23:59

Subject

CN=Luminati Networks Ltd,O=Luminati Networks Ltd,POSTALCODE=4250713,STREET=3 Hamachshev st,L=Netanya,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ef:cb:e3:90:ef:8c:38:3f:b9:75:2c:9b:5f:8a:86:88
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

08-02-2021 00:00

Not After

08-02-2023 23:59

Subject

CN=Luminati Networks Ltd,O=Luminati Networks Ltd,POSTALCODE=4250713,STREET=3 Hamachshev st,L=Netanya,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1c:16:fc:e3:3d:b8:68:8a:69:bf:ca:a6:65:b3:0d:3d:bc:ed:14:ca:ef:ec:50:29:2d:23:1d:b7:fb:e3:5a:83
Signer

Actual PE Digest

1c:16:fc:e3:3d:b8:68:8a:69:bf:ca:a6:65:b3:0d:3d:bc:ed:14:ca:ef:ec:50:29:2d:23:1d:b7:fb:e3:5a:83

Digest Algorithm

sha256

PE Digest Matches

false

40:1e:de:a0:fc:22:89:cc:71:6c:9c:c7:98:2b:6f:84:e3:dd:3e:4a
Signer

Actual PE Digest

40:1e:de:a0:fc:22:89:cc:71:6c:9c:c7:98:2b:6f:84:e3:dd:3e:4a

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\cygwin\home\bat\bat\checkout\zon\build.app_win64r\pkg\win\sdk\lum_sdk32.dll.pdb

Imports

advapi32

AllocateAndInitializeSid
FreeSid
InitializeSecurityDescriptor
RegCloseKey
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetKeySecurity
SetEntriesInAclW
SetNamedSecurityInfoW
CryptAcquireContextW
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash

shlwapi

PathRemoveFileSpecW

winhttp

WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpSetOption
WinHttpSendRequest
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpSetStatusCallback
WinHttpReadData
WinHttpReceiveResponse
WinHttpQueryDataAvailable

shell32

CommandLineToArgvW

kernel32

SetEnvironmentVariableA
SetEnvironmentVariableW
SetEndOfFile
HeapSize
GetTimeZoneInformation
CreateFileW
OutputDebugStringW
FreeLibrary
SetConsoleCtrlHandler
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
FindClose
FindFirstFileW
FindNextFileW
SetErrorMode
GetProcAddress
LoadResource
LockResource
SizeofResource
FindResourceW
LoadLibraryW
GetCommandLineW
GetLastError
GetCurrentThreadId
TerminateThread
GetVersionExW
GetModuleFileNameW
LocalFree
HeapFree
CreateDirectoryW
DeleteFileW
MoveFileExW
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapReAlloc
GetFileAttributesExW
SetFileAttributesW
FileTimeToLocalFileTime
GetFileInformationByHandle
GetFileType
PeekNamedPipe
FileTimeToSystemTime
SetFilePointerEx
EncodePointer
DecodePointer
CreateThread
ExitThread
LoadLibraryExW
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetConsoleCP
GetConsoleMode
SetLastError
GetCurrentThread
GetProcessHeap
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
GetStdHandle
RtlUnwind
CloseHandle
ReadFile
ReadConsoleW
SetStdHandle
DeleteCriticalSection
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
CreateSemaphoreW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
FatalAppExitA
WriteConsoleW
FlushFileBuffers
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetLocaleInfoW

Exports

Exports

?lum_sdk_clear_choice@@YGXXZ
?lum_sdk_get_choice@@YGHXZ
?lum_sdk_init@@YGXPAD@Z
?lum_sdk_init_autorun@@YGXPADH@Z
?lum_sdk_init_monitor@@YGXPAD@Z
?lum_sdk_init_ui@@YGXPAD@Z
?lum_sdk_init_wait@@YGXPAD@Z
?lum_sdk_is_supported2@@YGHPAH@Z
?lum_sdk_is_supported@@YGHXZ
?lum_sdk_run@@YGXXZ
?lum_sdk_run_wait@@YGXXZ
?lum_sdk_set_app_name@@YGXPAD@Z
?lum_sdk_set_benefit_txt@@YGXPAD@Z
?lum_sdk_set_bg_color@@YGXPAD@Z
?lum_sdk_set_btn_color@@YGXPAD@Z
?lum_sdk_set_choice_change_cb@@YGXP6GXXZ@Z
?lum_sdk_set_dlg_pos@@YGXNN@Z
?lum_sdk_set_dlg_pos_type@@YGXW4dlg_pos_type_t@@@Z
?lum_sdk_set_logo_link@@YGXPAD@Z
?lum_sdk_set_not_peer_txt@@YGXW4not_peer_txt_t@@@Z
?lum_sdk_set_peer_txt@@YGXW4peer_txt_t@@@Z
?lum_sdk_set_tos_link@@YGXPAD@Z
?lum_sdk_set_txt_color@@YGXPAD@Z
?lum_sdk_set_txt_culture@@YGXPAD@Z
?lum_sdk_uninit@@YGXXZ
_dotnet45_cleanup@4
_dotnet45_download@8
_dotnet45_init@4
_dotnet45_install_exec@8
_dotnet45_install_res@8
_dotnet45_verify@4
_lum_sdk_check_supported@0
_lum_sdk_clear_choice_c@0
_lum_sdk_get_choice_c@0
_lum_sdk_init_autorun_c@8
_lum_sdk_init_c@4
_lum_sdk_init_monitor_c@4
_lum_sdk_init_ui_c@4
_lum_sdk_init_wait_c@4
_lum_sdk_is_supported2_c@8
_lum_sdk_is_supported_c@0
_lum_sdk_run_c@0
_lum_sdk_run_wait_c@0
_lum_sdk_set_app_name_c@4
_lum_sdk_set_benefit_txt_c@4
_lum_sdk_set_bg_color_c@4
_lum_sdk_set_btn_color_c@4
_lum_sdk_set_choice_change_cb_c@4
_lum_sdk_set_dlg_pos_c@16
_lum_sdk_set_dlg_pos_type_c@4
_lum_sdk_set_logo_link_c@4
_lum_sdk_set_not_peer_txt_c@4
_lum_sdk_set_peer_txt_c@4
_lum_sdk_set_tos_link_c@4
_lum_sdk_set_txt_color_c@4
_lum_sdk_set_txt_culture_c@4
_lum_sdk_uninit_c@0

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e10231abb37406ce7202dc3de7e2172

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

ef:cb:e3:90:ef:8c:38:3f:b9:75:2c:9b:5f:8a:86:88Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

ef:cb:e3:90:ef:8c:38:3f:b9:75:2c:9b:5f:8a:86:88Certificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

1c:16:fc:e3:3d:b8:68:8a:69:bf:ca:a6:65:b3:0d:3d:bc:ed:14:ca:ef:ec:50:29:2d:23:1d:b7:fb:e3:5a:83Signer

40:1e:de:a0:fc:22:89:cc:71:6c:9c:c7:98:2b:6f:84:e3:dd:3e:4aSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

shlwapi

winhttp

shell32

kernel32

Exports

Exports

Sections

.text Size: 164KB - Virtual size: 164KB

.rdata Size: 31KB - Virtual size: 30KB

.data Size: 5KB - Virtual size: 14KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 3.0MB - Virtual size: 3.0MB

.reloc Size: 7KB - Virtual size: 7KB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

ef:cb:e3:90:ef:8c:38:3f:b9:75:2c:9b:5f:8a:86:88
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

ef:cb:e3:90:ef:8c:38:3f:b9:75:2c:9b:5f:8a:86:88
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

1c:16:fc:e3:3d:b8:68:8a:69:bf:ca:a6:65:b3:0d:3d:bc:ed:14:ca:ef:ec:50:29:2d:23:1d:b7:fb:e3:5a:83
Signer

40:1e:de:a0:fc:22:89:cc:71:6c:9c:c7:98:2b:6f:84:e3:dd:3e:4a
Signer

.text
Size: 164KB - Virtual size: 164KB

.rdata
Size: 31KB - Virtual size: 30KB

.data
Size: 5KB - Virtual size: 14KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

.reloc
Size: 7KB - Virtual size: 7KB