e:\客户资料\常州长江玻璃\二次开发程序\C#\obj\Release\CJBLSERVICE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
CJBLSERVICE20190803.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
CJBLSERVICE20190803.dll
Resource
win10v2004-20240426-en
General
-
Target
CJBLSERVICE20190803.dll
-
Size
60KB
-
MD5
5e98fcedd739d24bc4b12d03f2839644
-
SHA1
8aa7614c76c9ce8cbec181a6ebadadd5120ca634
-
SHA256
4b997d429d7f6eb6edd9f40f4f77078414d57cbf32f71ebe55249d15bfafc252
-
SHA512
a1a1bfa8868be6a1ba7b13b5a68930032f0d404a80afdddcbd9cb2c0af96a0be76301e639bfdfb3a3d221605142a4e2b2d6bf0fbf9a04b25df5310dd87b15f1b
-
SSDEEP
768:orLgYmBH2PrHQKrrk6GhrkNPE0I9l5TjRsz7jJ0U:URnt8mUsjJn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CJBLSERVICE20190803.dll
Files
-
CJBLSERVICE20190803.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ