comerr64[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

comerr64.dll
Size

15KB
MD5

6dd6db53f77a46b6bc6a6b5fece9ca2d
SHA1

301a17cfaef27ceccb2e3936b3f210d858b6a9d7
SHA256

cc576c5f64c98c757453b24bc1bbcd275c745dd8462085d20f9def513bc2c983
SHA512

cd1d9e4dba90c589fe1cc254640bb6e709023b6187c26ec842b35ebf637d6a94734fe96740a5fe5d1caa9d2bd5b708ef2ba922b9fb8f337aa2303b354379f5f5
SSDEEP

384:Vmrdz83BZcIxnYCkGvD/Bp37BPPFo8NgzzDT:4dI2Gb371dkT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
comerr64.dll

Files

comerr64.dll
.dll windows:6 windows x64 arch:x64

d87bf6c46f2a982a39dc5bad8aa207b6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

k5sprt64

krb5int_key_delete
krb5int_setspecific
krb5int_getspecific
krb5int_key_register
k5_strerror_r
krb5int_strlcpy

kernel32

IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
CloseHandle
GetLastError
ReleaseMutex
WaitForSingleObject
CreateMutexA
LocalFree
FormatMessageA
GetCurrentProcessId
OpenProcess
RtlCaptureContext

user32

GetGuiResources
MessageBoxA

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-runtime-l1-1-0

abort
strerror
_wassert

api-ms-win-crt-string-l1-1-0

strlen
strncpy
strncat

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
_fileno
fputc
fputs
__stdio_common_vsprintf
fflush
__acrt_iob_func
_isatty

Exports

Exports

add_error_table
com_err
com_err_va
error_message
remove_error_table
reset_com_err_hook
set_com_err_hook

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d87bf6c46f2a982a39dc5bad8aa207b6

Headers

DLL Characteristics

File Characteristics

Imports

k5sprt64

kernel32

user32

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 3KB

.pdata Size: 512B - Virtual size: 492B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 40B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 3KB

.pdata
Size: 512B - Virtual size: 492B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 40B