4cddf5215fecedb997fc879393a3c2076f3d232b90e4c43fb1caa79239140e7eN

Sharing

Copy URL Twitter E-mail

General

Target

4cddf5215fecedb997fc879393a3c2076f3d232b90e4c43fb1caa79239140e7eN
Size

1.2MB
MD5

9227dd05a759b996108d31f98d3c5890
SHA1

1235dc908053b9f7a40ee655858cb3971b9bb5a2
SHA256

4cddf5215fecedb997fc879393a3c2076f3d232b90e4c43fb1caa79239140e7e
SHA512

f0c25891226d9d971fa49161989b87b0736e31d72e543c08ccd9382599cfbba8922c64e433e3837bab1186e8067a3fe623af26f9db3e1d511cb2352ea3eb2d20
SSDEEP

6144:/7aNimQvAm/NHLko+JQLJuIYQh9WgtfIR8s9kOpVOWrQmKK3Ka6IWeX7bAis0U0b:/FjLVROSRg

Score

1^/10

Malware Config

Signatures

Files

4cddf5215fecedb997fc879393a3c2076f3d232b90e4c43fb1caa79239140e7eN
.dll windows:5 windows x64 arch:x64

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

68:b3:15:de:b3:11:ba:28:66:f2:36:2f:4f:a9:ce:74:d9:0f:cd:b3
Signer

Actual PE Digest

68:b3:15:de:b3:11:ba:28:66:f2:36:2f:4f:a9:ce:74:d9:0f:cd:b3

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\office\Target\uicaps_common\X64\ship\es-es\UicapsEmptyTrx.PDB

Sections

.rdata
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:01:cf:3e:00:00:00:00:00:0fCertificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

61:06:94:2d:00:00:00:00:00:09Certificate

Extended Key Usages

Key Usages

68:b3:15:de:b3:11:ba:28:66:f2:36:2f:4f:a9:ce:74:d9:0f:cd:b3Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 145B

.rsrc Size: 1.1MB - Virtual size: 1.1MB

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:06:94:2d:00:00:00:00:00:09
Certificate

68:b3:15:de:b3:11:ba:28:66:f2:36:2f:4f:a9:ce:74:d9:0f:cd:b3
Signer

.rdata
Size: 512B - Virtual size: 145B

.rsrc
Size: 1.1MB - Virtual size: 1.1MB