ORIGIN MENU V3[.]1_protected[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ORIGIN MENU V3.1_protected.dll
Size

1.6MB
MD5

cc7d084cb0031d00e4541d605ccbaef2
SHA1

5b507aead2e7649e676197246b83bb397dcf414a
SHA256

d6e7fb12d7f055cc565a211ab893dc4e7b0efc0adf30e9beb0da6f5f25999dc7
SHA512

dbaf894a5ae086379c8187c44ac0696a923772df46c41a1c4727a6f2dc7309714f76059ac0477fa2b1eda33eabef1edf1e7b2fd01e9841f0c2fa5caf21836566
SSDEEP

6144:/f51/igBfPyCG2wuv26qRl6p6kIedCwtz4lUH/qGk33cMktuFbF9B:D/XBfPC2NakVswKKg0t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ORIGIN MENU V3.1_protected.dll

Files

ORIGIN MENU V3.1_protected.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ