JHPlat[.]Apps[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

JHPlat.Apps.dll
Size

28KB
MD5

2ec9faa438625f7198288b11f0840436
SHA1

6b49e7b32ab4f1fd22e460010a8418eb51bf2182
SHA256

141f2ea5ae4bd87961d76658dd7a06d8a4ac51a1afb3833c3440b7a31759dca0
SHA512

1ba63c5632d5469333c20d7f1ec39c8d2dd831f3a42c33a5502666d15a61db14ab4b0b01e34e2d3fc6a66a0822c74cadc9521cdc67df5bfc60062314adaac45c
SSDEEP

768:ceouSabx29obx/MNBl7R8AWGrI1nYw+u0SDc:xouSKV/iSxGrI1nYwF0t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JHPlat.Apps.dll

Files

JHPlat.Apps.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Code\XMT20240327\NetCore_API\src\modularity\app\JHPlat.Apps\obj\Release\net6.0\JHPlat.Apps.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ