C:\Users\Grayson\Desktop\Gorilla Tag Mods\! ii'sStupidMenu\obj\Debug\netstandard2.1\ii's Stupid Menu.pdb
Static task
static1
General
-
Target
iis_Stupid_Menu.dll
-
Size
697KB
-
MD5
f876c254b59cfe360e4fb96d6c18d3eb
-
SHA1
121d5cc96c9e456803ed9fd968a13578c75d66b6
-
SHA256
bb8689d5627e600230a5a096af890daef60e56eff7cbba3e55825ecdd597f322
-
SHA512
be98e4e0ce6bb2ddcd5e9c01796dc32ace75ed45e4ece0799c601f13a695223e3dd0a40f39e7673d2a458dc83c0f467e42823ed2cf46c52ca28b4e77d6996f29
-
SSDEEP
12288:wZ0vR33m47A/KnAZHMYKDGDeT7Pc5XKnx8I:e0vRHm47AKnGHM3SKOMx8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource iis_Stupid_Menu.dll
Files
-
iis_Stupid_Menu.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 695KB - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ