Kolossal_MenuV2-protected-1[.]dll | Triage

Sharing

General

Target

Kolossal_MenuV2-protected-1.dll
Size

444KB
MD5

19dbfe3e1fe3dfd93cf38940a134a60d
SHA1

83df5c96d1c0231f0e6be847daaf9e2f45751457
SHA256

b79bfbd2a8361351c87d3401811c8c56a6298db25c7ee60292ce7d836425f2ce
SHA512

d48421e3bdba1a51b695388f84d55eb336e600ea43b1b7104b4b3ea87654b24782753abd60cfa63becf71d589c84d96308f64a8d9e11f2fc36acd810c886c116
SSDEEP

6144:2/CkcTJGukEfMnF1QxwTJ6doqcTIJC1f+BDwXoNgNXC:pk2JGukEfMjQxrozn1GxwYi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Kolossal_MenuV2-protected-1.dll

Files

Kolossal_MenuV2-protected-1.dll
.dll windows:4 windows x86 arch:x86

Password: infected

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 442KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ