meh[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

meh.dll
Size

74KB
MD5

ed8078fb085245ba7af5143dd7c6eb59
SHA1

4c11ab6e6b48178c76aa72fc3993cdede438de0d
SHA256

f8e256f917e29a173a166bc5266ada443aa2d3500a25e5dabab8712091c0cc41
SHA512

aa4e8e706567b36c39b37c16b8d026cc77cb04211f6ee95ba80208a1220df19bf7288356fbd2321119e8028fc073be69d9ee9d96b902dd5ba7db9086c28de5a3
SSDEEP

768:E+N2cbtOQlnFTi/yP17uYG6zblsZEO903CyFuxFxq/jsbzKEuz0C+C+50xuH/mmR:WcQImm+/4YE/js/K1QC+Wo/3GbBnfe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
meh.dll

Files

meh.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Georg\Downloads\ColossalCheatMenuV2-main\ColossalCheatMenuV2-main\ColossalCheatMenuV2\ColossalCheatMenuV2\obj\Debug\ColossalCheatMenuV2.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ