/home/ubuntu/api/menu/obj/Debug/netstandard2.1/ExcessNuker.pdb
Static task
static1
General
-
Target
ExcessNuker (5).dll
-
Size
17KB
-
MD5
34502e1729b55b455a01f6ccb81de607
-
SHA1
c7872c306bf2fd9120b5dbcf2c158772a830f9f9
-
SHA256
8cebecf3686082c67042aeb84cf83b638b1e1ef11f3ce4c50fa421071695cf7d
-
SHA512
dd6d2cc555e4ecd23d4e7e1c1f976240ca709008b666ebd89f192ec4c1e4711e2d3e83ef9c443095432a6b8589e7337d4966ce18682fdb709bd48b9a85b01e68
-
SSDEEP
384:DcjNfx7xrLo2LGgsYXhaXc/9THpQ7rsM6NR:gpfFJo2MYF5+P6r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ExcessNuker (5).dll
Files
-
ExcessNuker (5).dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ