cadt[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cadt.dll
Size

19KB
MD5

7adb52be768b7a1cba41efd9d2d5e433
SHA1

48e9f4b23219b47626ff14cf21bc341573ab2864
SHA256

ebaed297a76b0ec0f5478f17be00e243e574908f7d3158e0a0a08d9038322255
SHA512

798dcc835a8d51a0192b267adc873d25dc561a25109cd6242c56341e821291c3271b6d1c10307d8084a2ff25768dfb00618be82448175f417c3fb0ca425fd678
SSDEEP

384:Gd241n4+sfOHomM8TSgzqRxd2J5mfBGRwRC3KMmbg6qZT:WPiOI8TSwqJQOB7FbkT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cadt.dll

Files

cadt.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

GetCadtVersion
InstrDasm
InstrDecode
MakeMnemonic

Sections

CODE
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE