metasploit | huj[.]dll | Triage

Sharing

General

Target

huj.dll
Size

6KB
MD5

c92b545a8473d4851312a658afe2fa64
SHA1

c5f3ee25cfb067f94952b53060baa6e4a8530814
SHA256

7c1fe1fd90d6f25fe822af87c1a9a21cd6e44c9e70213e4c8abc68c5189542ae
SHA512

cdb7311fe09d1470d6136bbdeeed91c8b978e883da5aafb5289a7e3246a376eb38aa55d5b17a22896258ffda77c46d91d68d964e56350b0c59356d6aa405edc7
SSDEEP

96:wzRQNvQefVLWS7b3uIUY1deReidtFGzNt:wUYef5WS7FwResA

Score

10^/10

metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/exec

Signatures

Metasploit family
metasploit
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

huj.dll

Files

huj.dll
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Quickemu\ctf\huj\obj\Debug\net8.0\huj.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ