Nexus_Revamped_V2[.]dll | Triage

Sharing

General

Target

Nexus_Revamped_V2.dll
Size

47KB
MD5

b604ae222567a9b9354eb6aaa9210466
SHA1

4b3f3f7bdf9a98317e6a186fd7390c2841b24b53
SHA256

59f892e4bb9763ff5a66fa06a92af3d3e549309e028bd5890d99f2b516465d46
SHA512

bf9fb7761ba6e87e176d68284e860c7ef8e81991a9538f39ffd1bc955433856e6cd79563b8c54d315c977583ed5ea094f33ded6c35c525d551fada2b857e4fcb
SSDEEP

768:xfyUiXjU/su4AL7wiTVlY+2903HyMjjTUNt4eDNiVmPxE:NyzXjVBAP/NrzjU34eDgVmPq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nexus_Revamped_V2.dll

Files

Nexus_Revamped_V2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\crott\Downloads\lost_the_money_in_my_bank_account\testplate\obj\Debug\netstandard2.1\StupidTemplate.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ