afe724f350a7345293a5a36ea017f9c3335214535d938ed216ef6077dfab4cee

Sharing

Copy URL

Twitter E-mail

General

Target

afe724f350a7345293a5a36ea017f9c3335214535d938ed216ef6077dfab4cee
Size

1.2MB
MD5

f476097e60e1066954961edf403398e9
SHA1

ecceec27e9ee98272831a50ffe7b62b83c64a7a8
SHA256

afe724f350a7345293a5a36ea017f9c3335214535d938ed216ef6077dfab4cee
SHA512

48e27b5a6825c1ccd4105d90db01750c37106ecef4aab1324d60ff716f1246d43b62a87908de5649e2dd2f7398ab9ca38e153e884233df926f0c840e4d29a112
SSDEEP

12288:70N7FFAHA8hHqE72wJNkQCr6HEmGsHWovtm7tUmC2wNlWoSfC5vtAXJTENjP+OOD:MkHbhHqe/b8r6HjnHJGUpnvO5TEQR

Score

1^/10

Malware Config

Signatures

Files

afe724f350a7345293a5a36ea017f9c3335214535d938ed216ef6077dfab4cee
.dll windows:4 windows x64 arch:x64

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-11-2023 19:09

Not After

14-11-2024 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8d:00:31:cc:8e:63:7d:90:3f:4d:2d:58:a6:10:e9:12:c9:ca:78:9a:a0:71:05:a2:11:cb:c2:54:b8:bf:8c:97
Signer

Actual PE Digest

8d:00:31:cc:8e:63:7d:90:3f:4d:2d:58:a6:10:e9:12:c9:ca:78:9a:a0:71:05:a2:11:cb:c2:54:b8:bf:8c:97

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/Microsoft.CodeAnalysis.AnalyzerUtilities/Release/netstandard2.0/Microsoft.CodeAnalysis.AnalyzerUtilities.pdb

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:afCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

8d:00:31:cc:8e:63:7d:90:3f:4d:2d:58:a6:10:e9:12:c9:ca:78:9a:a0:71:05:a2:11:cb:c2:54:b8:bf:8c:97Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.data Size: 120KB - Virtual size: 118KB

.reloc Size: 12KB - Virtual size: 8KB

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

8d:00:31:cc:8e:63:7d:90:3f:4d:2d:58:a6:10:e9:12:c9:ca:78:9a:a0:71:05:a2:11:cb:c2:54:b8:bf:8c:97
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 120KB - Virtual size: 118KB

.reloc
Size: 12KB - Virtual size: 8KB