d04b5089ea4c2509f428883d5dc37e9aeac4a340df49785cbc59d5b8cd811df8N

Sharing

Copy URL Twitter E-mail

General

Target

d04b5089ea4c2509f428883d5dc37e9aeac4a340df49785cbc59d5b8cd811df8N
Size

105KB
MD5

cba3f97b167e4202b2abbcb673a1e260
SHA1

daff8e0082229220161a23c2ba94a6d2e643758e
SHA256

d04b5089ea4c2509f428883d5dc37e9aeac4a340df49785cbc59d5b8cd811df8
SHA512

39c9dfb7344a58999107604f4245a2a9afadaee83092eeb3ab4318cc77a456337a4a3f77515f84ebe71782a5331bca86f497eb7607974291706818c22a2aa06e
SSDEEP

3072:9Z7A2s5dSBxRWXHeo3rPxOYkiysS95pecwaAyNkhEdr8w9m6Q2/o2DWzLrGUki+6:f7A2s5dSBxmHeYkiysS95pecwaAekhE+

Score

1^/10

Malware Config

Signatures

Files

d04b5089ea4c2509f428883d5dc37e9aeac4a340df49785cbc59d5b8cd811df8N
.dll windows:5 windows x64 arch:x64

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

81:a0:50:22:96:de:e4:f9:87:65:57:18:0c:2a:4a:05:67:e6:06:c1
Signer

Actual PE Digest

81:a0:50:22:96:de:e4:f9:87:65:57:18:0c:2a:4a:05:67:e6:06:c1

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\office\Target\uicaps_common\X64\ship\es-es\UicapsEmptyTrx.PDB

Sections

.rdata
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:01:cf:3e:00:00:00:00:00:0fCertificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

61:06:94:2d:00:00:00:00:00:09Certificate

Extended Key Usages

Key Usages

81:a0:50:22:96:de:e4:f9:87:65:57:18:0c:2a:4a:05:67:e6:06:c1Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 145B

.rsrc Size: 98KB - Virtual size: 97KB

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:06:94:2d:00:00:00:00:00:09
Certificate

81:a0:50:22:96:de:e4:f9:87:65:57:18:0c:2a:4a:05:67:e6:06:c1
Signer

.rdata
Size: 512B - Virtual size: 145B

.rsrc
Size: 98KB - Virtual size: 97KB