Lskj[.]Business[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Lskj.Business.dll
Size

278KB
MD5

73cdd3f135caa9e8cb1cc0c607bc2f28
SHA1

12f9e1d9579dfac132dc46ccdbd3f5532e829f13
SHA256

d361fc804c58066b8e4e9fdde029151ef79107b6b4b367be0cb2f034d84b355b
SHA512

dd02e338f3ada6e4ad1aeee0b2017c08907c50f3681beff5a2a96b35b65f62394d25fb2c86f57bf8067e545c016ed291f8b21f4320efa61b494659c79ffa7b8c
SSDEEP

3072:iWsdWEHOu0tYhfxmjFEt26bJFJAs26LD6JRUbkImtW8cJZDJo+Fla3WVn7+wOs66:aWnCFFBkLESkNfLJC38

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lskj.Business.dll

Files

Lskj.Business.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\ERP_CS\插件库\Lskj.Business\obj\Debug\Lskj.Business.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ