Lincolns_Paid_Remastered_V2_FUCKED_BY_VIXX_AND_QEZ[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Lincolns_Paid_Remastered_V2_FUCKED_BY_VIXX_AND_QEZ.dll
Size

47KB
MD5

696269acfe3d60ce55e439aceddbdaaf
SHA1

6a16c49f319b7f74b903b4e302e805e728f2e2b4
SHA256

8e02e44c1ebdf58f9da89fe641163a9dc58341606e8eb65fb042910b54fa1073
SHA512

fa719075ef00951e53133f207f59f681f89603d9dcc519e8bd4b2e51ec99cd9995a0d24ee77403e845e3f756a499508a035b46055a1bb948e7b8dbdf25fb43f7
SSDEEP

768:DJhc7h//f4XO0mJPFYPLlO/yUH4mof4NqgqoAUQVHtar:DJho/osXHshVHi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lincolns_Paid_Remastered_V2_FUCKED_BY_VIXX_AND_QEZ.dll

Files

Lincolns_Paid_Remastered_V2_FUCKED_BY_VIXX_AND_QEZ.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Jamie Scott Ilmers\Downloads\lost_the_money_in_my_bank_account\testplate\obj\Debug\netstandard2.1\StupidTemplate.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ