TrollNation-Troll_mod-1[.]0[.]2[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TrollNation-Troll_mod-1.0.2.zip
Size

178KB
MD5

fd3d76e1a83b00d76462aa09e45c93d7
SHA1

81214347abcd842d903c0a74eedbb14d6e0e126e
SHA256

60e3301681b8e083e3174ba7233765279ed6aa551ef8a9e26ce91abf02b1f5ba
SHA512

6c5fe56373d4cd24cca3a912a3393c93f56ce6dd9bafef05b5a09ad299fd910a5ce1e07c619f2697290bace625acbed428016f826a5dc1d1cefd6531ad7b26b6
SSDEEP

3072:A70nYQPe23lLkm5y7XBYXVrC0ihhlkdIGN4fVsZRX1BFHXWz6MjJ6/X:A7FsYXCXZCjrkdIGN4fuZX3l8J6/X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TrollMod.dll

Files

TrollNation-Troll_mod-1.0.2.zip
.zip
README.md
TrollMod.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\VisualStudio\TrollMenuLethalCompany\obj\Debug\net48\TrollMod.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
icon.png
.png
manifest.json