TGSGhostts_Menu[1][.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TGSGhostts_Menu[1].dll
Size

607KB
MD5

f26664bf07a99d4dc8c4ecfb17913f3d
SHA1

2fbf6aa0f81c7f290d91a4a8df434e8937a5fec0
SHA256

068147447ceb077cbf29f224d8b493f8253fb1112a5ea1458217e385a2eccf22
SHA512

d49d0f809325cc876f3bec32a4685f056b866828fd6f23339ac62824386128fdf4d65a6287150903e8570b775ec77b7725581e2d3ffe8ecdaf4d730011882308
SSDEEP

3072:rnL+/E8AWoYUjUcqqPJ0T1D2UhLuJHvXE7qtE7qgc9PTjqmWHkIhkD5XPkUg3mRj:TL+lAaFoE7qtE7qgYPTjq1SksUCEWiu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TGSGhostts_Menu[1].dll

Files

TGSGhostts_Menu[1].dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 605KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ