JHPlat[.]VisualDev[.]Engine[.]dll | Triage

Sharing

General

Target

JHPlat.VisualDev.Engine.dll
Size

213KB
MD5

d3f090d9713087ee917b41b019f29b32
SHA1

b673db6c95246b7bee7ea5e01ddf44c13034ab14
SHA256

d46f928fb4442f034e22f3f67fe9c043585c4424c90f7403221b5eb36b26516f
SHA512

cb6acf4091c6fcf1538db053227a7575f2ab3de7b42cf3a3a7f2c8a7a4d2fb2135c68d383f325ad01d037d5a6f173c9faa65d11f1c945f202f355cf7b39463fa
SSDEEP

3072:3csvGIHCr9zQiFsxr2vHcqHoaxxAp9lMyaZbJiXMXR7avtlOYnXAZZ5OOOOOlQOh:ssb2QJK1ChqbJNR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JHPlat.VisualDev.Engine.dll

Files

JHPlat.VisualDev.Engine.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Code\XMT20240327\NetCore_API\src\modularity\engine\JHPlat.VisualDev.Engine\obj\Release\net6.0\JHPlat.VisualDev.Engine.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ