Lskj[.]AutoUpdate[.]dll | Triage

Sharing

General

Target

Lskj.AutoUpdate.dll
Size

236KB
MD5

f985fbd51dc2ea6d5d0f9bd71c4beb91
SHA1

de3df596b106d487798d2d0891a765ef2b1e4456
SHA256

3b63ba88ac4d6625615e69956535fd13207512114f38c9c0f73d7b8fdbd38c33
SHA512

86d0499f5000581d3b33d25a7775fb3dd0a037f764822c55af9bcbaf4c0028e97861a3255aadb5f15ea0f8f5a4aea6a4fc4a2fa16dc2538b704c23c728d3ae34
SSDEEP

1536:6hA8ud/RC1Nm3z6a20vFH37/3z6a20vFH37c3z6a2+:eA8c/RC1E3z6lqr3z6lqY3z6l+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lskj.AutoUpdate.dll

Files

Lskj.AutoUpdate.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\ERP_CS\插件库\Lskj.AutoUpdate\obj\x86\Debug\Lskj.AutoUpdate.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ