JL_Drive[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

JL_Drive.dll
Size

367KB
MD5

8c76ee1002516749483cc5a7732228b8
SHA1

5eaa54c69a8aebceca719a871839c3bf950e5782
SHA256

b219d63eea254c1f45e98b8bad7584dc6384db044b694a5117401f8e0a7694f2
SHA512

6bd89b4e0ea1b2f6c3e43295c32fba74effc2c3ff2cbaaaac8ca625d766e0abd726fceed12eb20abf3bd5c198a2c21383c4eb3c59984fcaebffbc1f2d0802939
SSDEEP

6144:NbNnwWTKgz3iPQ6KOAqOvSU5McNS0VQGnkXBcR5VZnkkqQCi17:nnhTKA3iPQ74rV0uG5HnwQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JL_Drive.dll

Files

JL_Drive.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DecPlateLicense
LedPkg
VoiceLedPkg
VoicePkg

Sections

CODE
Size: 313KB - Virtual size: 313KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ