0f4234bdaf5dcde6f186ce2ff43aa219c681db6a6c94ff92c4c0884d0a6fdbd9N

Sharing

Copy URL Twitter E-mail

General

Target

0f4234bdaf5dcde6f186ce2ff43aa219c681db6a6c94ff92c4c0884d0a6fdbd9N
Size

13KB
MD5

130a0021c1fc878d2ed6c7104a6bf730
SHA1

3b99587c614b5c93fafdc3880b216211fc4c1a28
SHA256

0f4234bdaf5dcde6f186ce2ff43aa219c681db6a6c94ff92c4c0884d0a6fdbd9
SHA512

3d0a64886ce372dfb13fc9354af8a1fa38658df9c124d23cb74e0f5d4ab315760533a5f61a5abd6ce745a83b92e11c8cfb253b5c42c3afac18b1b7ed868733b7
SSDEEP

192:VsoLiHDDxVWvpZWOsWJWadJCsVWQ4yWEBm+0U8X01k9z3Ae7INay:VbOHhVWvpZWOZCsxBmo8R9zZ4ay

Score

1^/10

Malware Config

Signatures

Files

0f4234bdaf5dcde6f186ce2ff43aa219c681db6a6c94ff92c4c0884d0a6fdbd9N
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:05:56:c9:20:2b:1f:74:32:5d:2d:00:00:00:00:05:56
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

51:0d:52:69:c4:14:9b:64:71:68:41:53:56:40:ab:d9:dc:bb:be:be:d1:bd:90:ce:51:ae:fd:b9:0a:4f:19:8c
Signer

Actual PE Digest

51:0d:52:69:c4:14:9b:64:71:68:41:53:56:40:ab:d9:dc:bb:be:be:d1:bd:90:ce:51:ae:fd:b9:0a:4f:19:8c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:05:56:c9:20:2b:1f:74:32:5d:2d:00:00:00:00:05:56Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

51:0d:52:69:c4:14:9b:64:71:68:41:53:56:40:ab:d9:dc:bb:be:be:d1:bd:90:ce:51:ae:fd:b9:0a:4f:19:8cSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:05:56:c9:20:2b:1f:74:32:5d:2d:00:00:00:00:05:56
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

51:0d:52:69:c4:14:9b:64:71:68:41:53:56:40:ab:d9:dc:bb:be:be:d1:bd:90:ce:51:ae:fd:b9:0a:4f:19:8c
Signer

.text
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B