iis_Stupid_Menu (2)[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

iis_Stupid_Menu (2).dll
Size

470KB
MD5

f550f2a7e4411567a1049b1fb7c6ed23
SHA1

043f7de28edff9a81e69c22525ae2a3761187266
SHA256

0d2c1a405cf8a19ef77a03e0dc4e22c4353ead2428aa24c10c4de5ddf34c30bb
SHA512

e29eae79c8649cc57cf609fd86e86325b1d56f6f11c129a25d359af24e9caae9b0944f83be67f70795e4f1e8067ad6401be2841320f7a5c8346a300d36ccfb91
SSDEEP

6144:pKmktks9DECj5pDKBTR7l77bHB6WFTR/fHCEU4XuHc2aLx2:hktkSXTGpR1UEXPzF2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
iis_Stupid_Menu (2).dll

Files

iis_Stupid_Menu (2).dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Grayson\Desktop\Gorilla Tag Mods\! ii'sStupidMenu\obj\Debug\netstandard2.1\ii's Stupid Menu.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 468KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ