C:\Users\corey\Downloads\MalachiTemp\MalachiTemp\obj\Debug\MalachiTemp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Coreys_Menu_V3.5.dll
Resource
macos-20240410-en
General
-
Target
Coreys_Menu_V3.5.dll
-
Size
237KB
-
MD5
e46fb3e7f5b5f553c979d29d0a2d9e68
-
SHA1
d9d8c77ed2823f988d11985e46dadcb3e989f775
-
SHA256
00ec7ac567a62049bd7fb332b23e5695214e9fdaf777e1892ca136c36ff3b1ce
-
SHA512
e1a1a94fcaaca5f5ded1fa3a4772f20e0793b3a0cc01173bd11b3e250cc743df9f3ddae7f8fbe035e3a6d80cf05049aa808066ce1322b445a74b543b13de0577
-
SSDEEP
3072:PPoiqKFAsqm/tT15wpVw6c3UJOh17xAUEXo2WHT7sL5rgUg8/6/WW:PPoiqKF+Gx3JTGtg/I6/W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Coreys_Menu_V3.5.dll
Files
-
Coreys_Menu_V3.5.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 235KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ