Lskj[.]Data[.]dll | Triage

Sharing

General

Target

Lskj.Data.dll
Size

49KB
MD5

631505a57e8325555d804f626631cfdb
SHA1

ab56c904105a6127749ccc3a00432df9d00e881f
SHA256

e68db78e9c5c6d5d08e21ec9a695d8b45e435c7d25a0aebef690669f11be7518
SHA512

be11952e7cef4bedd753a8e677423e8ab7ef0cfc7d700390b24b5493631019a54c0382b27ef0407ffe5cb6bd62d768fdb26f4fec4daa6484be59b85d7370b1d3
SSDEEP

1536:VpwiT3jjkbihstiYtXFhAbTLOynAWO3N9tbDMz8+3:VbjjkbIs4YJFSXLOn9YYA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lskj.Data.dll

Files

Lskj.Data.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\ERP_CS\插件库\Lskj.Data\obj\Debug\Lskj.Data.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ