PBs_Awsome_Menu1[.]1_1[.]dll | Triage

Sharing

General

Target

PBs_Awsome_Menu1.1_1.dll
Size

31KB
MD5

e3c8c24e113cbfe00f5516eb585103f6
SHA1

97ea04bb655da3c8af510f0e307186f8e6bedf75
SHA256

3827634b7bc0485c59405e26ad982b11cdb90edc2479f49c23c57cde955b4c09
SHA512

fb4e6655b88a52c410ed5293d7e0c04428093b76ba10f1dd566a5b0760773cb8c6924f5ce627e84d79f4f96b84656deb25595e492a18e9c4750a73c76939132d
SSDEEP

384:/KK99D2dMM3fT5QnWnzhfJHAdihj8elq1DshVR7l8gA5h7lyEHGIOTWBZXYECiqC:iQbM3fFQnWnzhfJgdUjpgkOXVsWg5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PBs_Awsome_Menu1.1_1.dll

Files

PBs_Awsome_Menu1.1_1.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\betha\Downloads\SynxMenuTemplate\SynxMenuTemplate\obj\Debug\netstandard2.1\SynxPRIVATE.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ