nutriii_RoomJoinr[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

nutriii_RoomJoinr.dll
Size

6KB
MD5

c14af64a60bc2f8fa6b613d90d2b8a8a
SHA1

f444d124e5818bea036127868e17ce9ac09295de
SHA256

1abff23a7062cdcae0cf56a64a8a9e716ec42b6ea574c2672003c52f0918507a
SHA512

2c1eb9095c5ced87d9a058320d642e88a132351fe0ca4eee549eec7ef10a49414a0a60a224fe36c5382c3dfe7f814bca2c43f200eee6463cbd2445e7bf63c6fd
SSDEEP

96:Oeqqb13nR8B+1SKGsIdSWUsEJJjqDPOk9XEjCw:Oevb1XR8BKNiQsEJteO4XACw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
nutriii_RoomJoinr.dll

Files

nutriii_RoomJoinr.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Edrian\Downloads\Penis_Client (1)\Penis Client\obj\Debug\nutriii_RoomJoinr.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ