iis_Stupid_Menu[.]dll | Triage

Sharing

General

Target

iis_Stupid_Menu.dll
Size

500KB
MD5

533d4ba1eaa6d8aaaf878ec55da8a5f5
SHA1

a74e256c491e1074cc6c232f76b612bf1ab4cf9a
SHA256

f9d8769d49e786936ed59de5e58c1d7f18aa53ce1cef67804b5ad04dacbe3cb6
SHA512

8ac936fdad694079f9268d00ed8b2d43a7c75464baeabe714c3159908060eae5cc858295d954eb395f5adb7be729a4fa65372e1230dc9ee5f39df5428777ff1e
SSDEEP

6144:XgOyv1CB+W6JAmN6t+Rov27edhHneC/bHB6U9L5JfHCEU4XuHc2aLx2:XLyv1JBmv2C3HHSEXPzF2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
iis_Stupid_Menu.dll

Files

iis_Stupid_Menu.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Grayson\Desktop\Gorilla Tag Mods\! ii'sStupidMenu\obj\Debug\netstandard2.1\ii's Stupid Menu.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 498KB - Virtual size: 498KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ