JilabaNotification[.]dll | Triage

Sharing

General

Target

JilabaNotification.dll
Size

240KB
MD5

1147b076ea6d6d0170d6e1ccff569789
SHA1

f5919b1967adaf796a8b1f8685540cd2d6184cfa
SHA256

46c2eada4abbeeea420a264a109d815aae81d693f2d462b87e41a691dda0358b
SHA512

7901cfc52a59e67ba5aec09f240cfb3887a6ef7068be094cadd9cb49bcec88a8f0b654d30c98838636282ef9781dcf71cdd841646a0365be12e90f70b69de760
SSDEEP

6144:+1VxnMxShuvzrnMJ57t6W0Db/dLaYVwz:QHSSQvEn7GDb/dL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JilabaNotification.dll

Files

JilabaNotification.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

\\lenovo\Jewellery\DotNet\Retail Jewellery Sources\WCF Service\AndroidService\JilabaNotification\JilabaNotification\JilabaNotification\obj\Debug\JilabaNotification.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ