JHPlat[.]Systems[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

JHPlat.Systems.dll
Size

858KB
MD5

5ab715e58d16c955102e297c8a77c57a
SHA1

1bdf819cf517b8219a7d9c90945c77c13fc17894
SHA256

aba703a53b8c1959bdda6a5b0ca4378184f5ed3488c0d749f94c5633bc25be32
SHA512

4a203695bc7c0acb3f448137750d0895c9a18c261ef82f92af24ce6b84ed41f15933d9130859b82e129cd27a28e2134930ab6be7e18fb6011464933cb0158849
SSDEEP

6144:NZOA1R4Q+rnlqB+JrnLgOEIlqS4mrylhh+CvB19zVoonqvUw0UXX8oYAU41ysWwZ:N5R4Q+rnlqB+JrnLNolvfx6aA5Ek7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JHPlat.Systems.dll

Files

JHPlat.Systems.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Code\XMT20240327\NetCore_API\src\modularity\system\JHPlat.Systems\obj\Release\net6.0\JHPlat.Systems.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 856KB - Virtual size: 855KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ