Lskj[.]CmCapture[.]dll | Triage

Sharing

General

Target

Lskj.CmCapture.dll
Size

22KB
MD5

874022169b9b9b697b47987bf7154a51
SHA1

beac28e52386fe0568582a46e19a3a5f392ab994
SHA256

ac6731720699e6ef8793165763d64002dc1f1dc4fe957aaf8aab4a39437df43a
SHA512

397f7db2f4499052e2edf41cad04e436bfc174b3100063705351d1913f23de49a04c655a7f1807571a1ca4cfad9e587a5e6266752ce469cb658882acea851eca
SSDEEP

384:ep6Y5bGTvn7HgN2BHwDwSregG5D7rO27qOP/3qyF43WY6RJWl:Oj2DARDV+7FayF25

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lskj.CmCapture.dll

Files

Lskj.CmCapture.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\LStest5.0\lserp_cs\插件库\Lskj.CmCapture\obj\x86\Debug\Lskj.CmCapture.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ