Lskj[.]DevFx[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Lskj.DevFx.dll
Size

224KB
MD5

952bf029b13ebd1fae594cf2c781d768
SHA1

30d8d9cf089641812febb760fb8591e45b66c49f
SHA256

55db010d35e061d33d580041f95792a2fccb67c3a2c106e69740af66625a81e1
SHA512

04e0f26e1b330b74f1ca55731c6c0e81fe8d91e7906e323248490690746359a35e490acf5c73f27635870bd22fe3b31aa9ad858541d98c4fa32fffce49f3808c
SSDEEP

3072:4LUZCokQ4hEv3W2hnh7Lis71tHF7m18tT8El82GnET4HE+9gctkRE:4osok4lhFictHe8tT8El82GDHEW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lskj.DevFx.dll

Files

Lskj.DevFx.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\D\Soft\code\KEB.DevFx\obj\Debug\Lskj.DevFx.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 222KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ