CumLoaderV4[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CumLoaderV4.dll
Size

204KB
MD5

18df04b15e69e1adec34e8094c437fb6
SHA1

2f618e2b846a99ac63fb3b3687f411553f3135f3
SHA256

8cd54da02a50d3bed3e9b8716eed087099a8d7a3e1cb4bf9fb866a41f655a54a
SHA512

5bbfec3a92ec37099b6c40a2d6e462063794ff5f8629dcaf37c249693a4a86ac0be6c9f3e2584191e58534685bba99f93874e7c299ce24b3f458bea6413dadfa
SSDEEP

3072:M7iikZyorrPFt6GEbGwG7nqmS+EJdq532ShvPpj6irTX1HmaUlSNmr/QrKNIpq9r:6ID6GFwg7Sbm5GSZxj6GTsYgmmVIDZG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CumLoaderV4.dll

Files

CumLoaderV4.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\gusap\OneDrive\Desktop\VRChat-Internal-Base-main\HexedBase\obj\Debug\net8.0-windows\CumLoaderV4.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ