Binary[.]CDnP[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Binary.CDnP.dll
Size

2.5MB
MD5

c8127dcb38816c39193d732c2b710bac
SHA1

2e2bdac59b67fbe425e0aaac091c4d26b05b36bc
SHA256

9ce54290c0ec2ceac1329b4c8718d8f48fa4532a82da3634b8c7a298c5e16358
SHA512

f662eaf23655c29859b46de3e6207576ed5b6cb7ae5cc285df646bd5980ab43aef29a361b68f68cfffc39b39b23570a1220dd1dace6516a06bf187613b03a3ea
SSDEEP

49152:uQ7KrwVxXanftWyEQ0RGy66O4UQ0H3jQaS9r:7GroxXPWG76f4U/Hsao

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Binary.CDnP.dll

Files

Binary.CDnP.dll
.dll windows:6 windows x86

749a3a33d7c199ace3aa5f43b77ba3b4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc

Exports

Exports

illkutjy
kutjyr
rhtrytku
trytu
uytutyjr

Sections

.text
Size: 417KB - Virtual size: 417KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 821KB - Virtual size: 820KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ