Uninstall-CommandCUEx[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Uninstall-CommandCUEx.dll
Size

24KB
MD5

7d658c26dd3f7a01581e7bc3de16c879
SHA1

8dcfa8b5cd91fcac3b7880ae8e0676975bebcf9e
SHA256

211b372992dc4e62a79ad5bb0bf664f553b54555b7d7b64436995ad6872a8dc0
SHA512

899b0a13225c2e16376653ca92892f26bdce6a6444fe3eafb85d76ce6bc1e0b24ba6bcb1f70c8b214edf4c7fad19df2bf089cfe39b6f489453ae40515446fab3
SSDEEP

96:TmD4w5V6JZ8YDi9PGyTrF7W7bI4r7FbXxE7b2U76Os:i8e6JXm1F74bN3pXe97

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Uninstall-CommandCUEx.dll

Files

Uninstall-CommandCUEx.dll
.dll windows:4 windows x86 arch:x86

da4a419ab9077fae442e766c4b9d030d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
DeleteFileA
ExitProcess
GetModuleFileNameA
lstrcpyA
Sleep
FindClose
FindNextFileA
lstrcmpA
FindFirstFileA
lstrcatA
lstrlenA
GetFileAttributesA
MoveFileExA
RemoveDirectoryA
SetFileAttributesA

Exports

Exports

_UninstallClear@16

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 543B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ