cdd82d8300b272c3b1b42e796dd3df27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdd82d8300b272c3b1b42e796dd3df27
Size

1.0MB
MD5

cdd82d8300b272c3b1b42e796dd3df27
SHA1

956aa1b64d4a57d99cb6b4a27875e9649b136292
SHA256

f6594c91c4d8b2940de672d6d1be10afd7a361913928dadb94f7cf6c121361d5
SHA512

9ce68d50c78eff2bd7a43a20e078735891a9b999c087ed194b0dca517ec36fb2276c65e17bc6ddb0f29e72de17e8f4c419b13f419a2cd5d4fdc31f79e4e2479e
SSDEEP

24576:4iV/K6N0eBM88sXDFbaVudhTgzLmDQEozGQEhSKR76hch:9Y6N0ejBXpbasL8zGQEhSK9Sc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdd82d8300b272c3b1b42e796dd3df27

Files

cdd82d8300b272c3b1b42e796dd3df27
.dll regsvr32 windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\binaries.x86ret\bin\i386\bbt\opt\bin\i386\hxds.pdb

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
HxGetObjectCA

Sections

.text
Size: 551KB - Virtual size: 550KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 251KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ