Jeez[.]ShipScheduled[.]Data[.]dll | Triage

Sharing

General

Target

Jeez.ShipScheduled.Data.dll
Size

198KB
MD5

567820189ddded75fe81587becf74388
SHA1

f7987ccd022f6eef5741172045d67416c4630b8c
SHA256

0a380d4d98a9e1b65c158f76f614ae68f43cb40208d5263077d412c3a0a7d4ed
SHA512

24727e1c2222656701fa712433775f583467b3272f946e379cfe4384d0012dd94422fd0b8a6f7a3f5d14ea76af1ade773f1d33859adaf44be9aff2eb11bc71ef
SSDEEP

3072:oiatL12rFdHo+NWi+f8hAK+h3++fyI+3IBcPqcPecPqcPXcPqcPOavud7cocIjcr:kX2rFdHo+NNOh3+lyJLJMJtL17

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Jeez.ShipScheduled.Data.dll

Files

Jeez.ShipScheduled.Data.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ