db8d79fe173c4f90d728c750387aaa215ac6758bf3553a5c928eaa1f3247e11b

Sharing

Copy URL Twitter E-mail

General

Target

db8d79fe173c4f90d728c750387aaa215ac6758bf3553a5c928eaa1f3247e11b
Size

15KB
MD5

414517d916cd9cba262c7f81a90babdf
SHA1

1414d1039c88923d516e4b6d35a83505833880a9
SHA256

db8d79fe173c4f90d728c750387aaa215ac6758bf3553a5c928eaa1f3247e11b
SHA512

436cfc4074f2567125cc5ba1f28894077973c7e82c55f041db632bfda89917374ee211774ff39ac51e105e20bb4ba66ddcb1f15d19ffd65d233e870fb14216ab
SSDEEP

384:0JXeo7w6s+DoZdu455w5hIYiRSofousib5pFbSvW:yLHoSOysYiRSoQuZV

Score

1^/10

Malware Config

Signatures

Files

db8d79fe173c4f90d728c750387aaa215ac6758bf3553a5c928eaa1f3247e11b
.dll windows:4 windows x64 arch:x64

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

02/11/2023, 08:32

Not After

30/10/2034, 08:32

Subject

CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:1b:a1:29:71:e5:10:ea:76:cd:ce:11:65:6b:fe:7e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

14/06/2022, 00:00

Not After

13/06/2025, 23:59

Subject

SERIALNUMBER=1067879,CN=Logitech Inc,O=Logitech Inc,L=Newark,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6d:77:1d:3a:39:dd:d8:6c:fd:0d:56:e4:2c:52:de:eb:8b:fb:27:96:40:38:41:19:c9:c1:be:32:be:b2:82:5e
Signer

Actual PE Digest

6d:77:1d:3a:39:dd:d8:6c:fd:0d:56:e4:2c:52:de:eb:8b:fb:27:96:40:38:41:19:c9:c1:be:32:be:b2:82:5e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31Certificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

01:1b:a1:29:71:e5:10:ea:76:cd:ce:11:65:6b:fe:7eCertificate

Extended Key Usages

Key Usages

6d:77:1d:3a:39:dd:d8:6c:fd:0d:56:e4:2c:52:de:eb:8b:fb:27:96:40:38:41:19:c9:c1:be:32:be:b2:82:5eSigner

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 4KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 1000B

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

01:1b:a1:29:71:e5:10:ea:76:cd:ce:11:65:6b:fe:7e
Certificate

6d:77:1d:3a:39:dd:d8:6c:fd:0d:56:e4:2c:52:de:eb:8b:fb:27:96:40:38:41:19:c9:c1:be:32:be:b2:82:5e
Signer

.text
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 1000B