94e0748a1c4e2f888891c76adb91c5162be24d823920e0c466b96b28521327f6N

Sharing

Copy URL Twitter E-mail

General

Target

94e0748a1c4e2f888891c76adb91c5162be24d823920e0c466b96b28521327f6N
Size

493KB
MD5

ff1662ce2101e9ff2fd940af55e2ebd0
SHA1

f41c5f927cfc5917fb60dfeccb7dbeb40b11127c
SHA256

94e0748a1c4e2f888891c76adb91c5162be24d823920e0c466b96b28521327f6
SHA512

8017ae5cf029bcb3b58b623a9859a1d1e8c0ea07b6cd651725be165f2f28f17f126b150789bb99b184f005e5e06ba5965a2f45c02f6d83c59319b40eeb5697be
SSDEEP

12288:M4bjVDFrko6F+HhiKpwR4bacMPVZ2u4g1qUKcybHVU:MMtFrko6F+HhmPVZ2XBU8bHVU

Score

1^/10

Malware Config

Signatures

Files

94e0748a1c4e2f888891c76adb91c5162be24d823920e0c466b96b28521327f6N
.dll windows:4 windows x86 arch:x86

Code Sign

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2024, 20:25

Not After

19/02/2025, 20:25

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c8:a9:89:f1:6c:81:15:39:86:e9:92:c3:2e:a8:17:be:71:bd:f1:73:e9:90:b1:df:9f:18:74:f0:00:38:43:6b
Signer

Actual PE Digest

c8:a9:89:f1:6c:81:15:39:86:e9:92:c3:2e:a8:17:be:71:bd:f1:73:e9:90:b1:df:9f:18:74:f0:00:38:43:6b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.Text.RegularExpressions.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Text.RegularExpressions\net6.0-Release\System.Text.RegularExpressions.pdb

Sections

.text
Size: 446KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

c8:a9:89:f1:6c:81:15:39:86:e9:92:c3:2e:a8:17:be:71:bd:f1:73:e9:90:b1:df:9f:18:74:f0:00:38:43:6bSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 446KB - Virtual size: 445KB

.data Size: 20KB - Virtual size: 19KB

.reloc Size: 17KB - Virtual size: 16KB

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

c8:a9:89:f1:6c:81:15:39:86:e9:92:c3:2e:a8:17:be:71:bd:f1:73:e9:90:b1:df:9f:18:74:f0:00:38:43:6b
Signer

.text
Size: 446KB - Virtual size: 445KB

.data
Size: 20KB - Virtual size: 19KB

.reloc
Size: 17KB - Virtual size: 16KB