CerInspector[.]dll | Triage

Sharing

General

Target

CerInspector.dll
Size

433KB
MD5

727fe0ccdb46ae82a424ff1b6cba6c4d
SHA1

68185938a49461abebc138750a337c2f8b213708
SHA256

eeb9e254a85e939abb4f8c4c10c7bf605b3a53959756df15a4cc43a16d686452
SHA512

87dbe08c1fa8f4807305a263881616c5d92f8e4236dc685a0ad99ae46b28fe89d60cd59a44f11e5a1b28189b3b485514c2ff8b184bfb13319277640fcbc4b56d
SSDEEP

6144:DLgdxoWquE46NaJNJNudSuLWdU+P3QRkqV6CR8IudaU3MtbFSCYYiRbdQ/2j8awl:InqXabJNApWjPG7O3aUcZYYQfjq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CerInspector.dll

Files

CerInspector.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CreateCerInspector
DoCheckIntfCer

Sections

CODE
Size: 368KB - Virtual size: 367KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 111B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ