0aaa1c867a053c720159acee8cfee7e02a6dc6943a219ec4291ec9eb5005a5bfN

Sharing

Copy URL

Twitter E-mail

General

Target

0aaa1c867a053c720159acee8cfee7e02a6dc6943a219ec4291ec9eb5005a5bfN
Size

140KB
MD5

100609d0ab9bd2b929a6bd523b05c350
SHA1

dd48cfd07cc4a0a842ce507861c29fdf4150f50b
SHA256

0aaa1c867a053c720159acee8cfee7e02a6dc6943a219ec4291ec9eb5005a5bf
SHA512

ab2818e26d95a50a708d30d62b9b221b193ec4083bdfdf91e975b5601c9f5cec9c113cedd282df34c3a6df405647f05a72ddb2f0ccbe74be597b549e90650936
SSDEEP

3072:f5c3ngBgXCbYFw7KPuQ5C/E3XZOXXO7NcqK5sv1CSn89gYWWhj+1fSP:1EuzwQ5sdJzYWEGm

Score

1^/10

Malware Config

Signatures

Files

0aaa1c867a053c720159acee8cfee7e02a6dc6943a219ec4291ec9eb5005a5bfN
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

75:37:ea:45:49:d3:32:02:3e:91:85:21:a2:c1:e5:a2
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

17-03-2023 06:04

Not After

16-03-2026 06:04

Subject

CN=Vitzo LLC,O=VITZO LLC,L=Cheyenne,ST=Wyoming,C=US,1.2.840.113549.1.9.1=#0c1465786563757469766573407669747a6f2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

02-11-2023 08:32

Not After

30-10-2034 08:32

Subject

CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b1:bd:e4:5c:5e:c5:07:c6:a0:40:b0:26:2a:c1:e4:98:d7:7c:84:cc:ef:de:be:a9:fa:93:ac:0b:cc:c9:a8:e9
Signer

Actual PE Digest

b1:bd:e4:5c:5e:c5:07:c6:a0:40:b0:26:2a:c1:e4:98:d7:7c:84:cc:ef:de:be:a9:fa:93:ac:0b:cc:c9:a8:e9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Countly.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

75:37:ea:45:49:d3:32:02:3e:91:85:21:a2:c1:e5:a2Certificate

Extended Key Usages

Key Usages

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

b1:bd:e4:5c:5e:c5:07:c6:a0:40:b0:26:2a:c1:e4:98:d7:7c:84:cc:ef:de:be:a9:fa:93:ac:0b:cc:c9:a8:e9Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 128KB - Virtual size: 127KB

.rsrc Size: 1024B - Virtual size: 992B

.reloc Size: 512B - Virtual size: 12B

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

75:37:ea:45:49:d3:32:02:3e:91:85:21:a2:c1:e5:a2
Certificate

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

b1:bd:e4:5c:5e:c5:07:c6:a0:40:b0:26:2a:c1:e4:98:d7:7c:84:cc:ef:de:be:a9:fa:93:ac:0b:cc:c9:a8:e9
Signer

.text
Size: 128KB - Virtual size: 127KB

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 512B - Virtual size: 12B