Jeez[.]Runtime[.]Base[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Jeez.Runtime.Base.dll
Size

1.0MB
MD5

1f1b6d12d64673e2925ea9c1cb617da2
SHA1

fa10b530c73474aae526caf012b910325f10811c
SHA256

bdd0249ee23fffb785676d2f7357398ca81564e1c7e04070b489fdd1fe441239
SHA512

7038f4dfd995af2c105fa591b0c1477efe84a18a50ebd97fbad4f637692888f2ff4d06727dbefbc1184843b1c2d6428b47132091caf20672c5848e66345c5ee3
SSDEEP

24576:qWT/5cN/rNQu+pTp3x9yfaQtRKDApFP91X2Zs:q6hgbMa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Jeez.Runtime.Base.dll

Files

Jeez.Runtime.Base.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ