ii's Stupid Menu (2)[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ii's Stupid Menu (2).dll
Size

698KB
MD5

218bf5378fdd5e3e96c7d346782dd04c
SHA1

e18e2c6ff6cf24d8adf6b58e4f9a68afc1bc82f1
SHA256

45934f2e7a3446bfc6665431c74ce6459496d6868404fe6eada93a8961b127da
SHA512

207bf3c9c352bd421883e5e5f874c46dc0c325afefe500efc3305be07ace1ab113ad9f90017e624de214e0487a5165260a42402e9a5f9aeb425340ccc35d5b1f
SSDEEP

12288:ToU9w+4A+4FvPi7Oi7XnsjQjsh6Qh6Ei7Ons+f0s38sh6GbQt7kCKMgnMiHEwKDX:UH+4A+4JM/gn1HE/SKOMx8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ii's Stupid Menu (2).dll

Files

ii's Stupid Menu (2).dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Grayson\Desktop\Gorilla Tag Mods\! ii'sStupidMenu\obj\Debug\netstandard2.1\ii's Stupid Menu.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 696KB - Virtual size: 695KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ