4d27543e1d59487218bd2e71d52f35351dc9d1608bbf942653b8396699e1482d

Sharing

Copy URL

Twitter E-mail

General

Target

4d27543e1d59487218bd2e71d52f35351dc9d1608bbf942653b8396699e1482d
Size

753KB
MD5

f5fb6a7147c2e606f2112b97e26d20cb
SHA1

8e999f615c09775e66d267e1b390a15fff7f7498
SHA256

4d27543e1d59487218bd2e71d52f35351dc9d1608bbf942653b8396699e1482d
SHA512

4ab41021bec5257080b5f18d77e4d5755f684d35c9eecf6b7dfd1d286caa1dd1df65eb783e59046ca46e76e891dd6e89d2f2b19c981f9b9125003172e5b3b4c4
SSDEEP

12288:2j02XzPXITOn8DcbHGZVvtq90dZCCGNJooooo8v7ZaXeFDc786tB/HiQ:LUQy8DKG3E9TzIuuo6tBfiQ

Score

1^/10

Malware Config

Signatures

Files

4d27543e1d59487218bd2e71d52f35351dc9d1608bbf942653b8396699e1482d
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

01:2a:9b:58:57:13:97:95:6c:dc:fc:20:20:3a:cf:49
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17-05-2024 00:00

Not After

29-06-2027 23:59

Subject

CN=Datto\, LLC,OU=datto rmm,O=Datto\, LLC,L=Norwalk,ST=Connecticut,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:59:35:ff:86:2d:a4:f0:2c:a3:78:86:5e:53:32:f1:ac:34:5f:b0:8f:02:ee:9c:01:4b:dd:8c:0e:79:d9:15
Signer

Actual PE Digest

1d:59:35:ff:86:2d:a4:f0:2c:a3:78:86:5e:53:32:f1:ac:34:5f:b0:8f:02:ee:9c:01:4b:dd:8c:0e:79:d9:15

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

/builds/rmm/repos/agent/agent-next/src/NetworkNode.Core/obj/Release/net6.0/NetworkNode.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 749KB - Virtual size: 748KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

01:2a:9b:58:57:13:97:95:6c:dc:fc:20:20:3a:cf:49Certificate

Extended Key Usages

Key Usages

1d:59:35:ff:86:2d:a4:f0:2c:a3:78:86:5e:53:32:f1:ac:34:5f:b0:8f:02:ee:9c:01:4b:dd:8c:0e:79:d9:15Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 749KB - Virtual size: 748KB

.rsrc Size: 1024B - Virtual size: 792B

.reloc Size: 512B - Virtual size: 12B

01:2a:9b:58:57:13:97:95:6c:dc:fc:20:20:3a:cf:49
Certificate

1d:59:35:ff:86:2d:a4:f0:2c:a3:78:86:5e:53:32:f1:ac:34:5f:b0:8f:02:ee:9c:01:4b:dd:8c:0e:79:d9:15
Signer

.text
Size: 749KB - Virtual size: 748KB

.rsrc
Size: 1024B - Virtual size: 792B

.reloc
Size: 512B - Virtual size: 12B