E:\Jenkins\workspace\8.1.0\8.1.0-nightly\core\JDLVirtualMatrix\JDLRimagePlugin\obj\x64\Release\JDLRimagePlugin.pdb
Static task
static1
Behavioral task
behavioral1
Sample
75c8c33945c877c4da7248b83275d841f2da53febc617b88d0e0d4ab46d96385.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
75c8c33945c877c4da7248b83275d841f2da53febc617b88d0e0d4ab46d96385.dll
Resource
win10v2004-20240611-en
General
-
Target
75c8c33945c877c4da7248b83275d841f2da53febc617b88d0e0d4ab46d96385
-
Size
74KB
-
MD5
05ba9d63a595c6388a5e23f38f476323
-
SHA1
06136b3c56ca4a127949138f0bdf663f859b9814
-
SHA256
75c8c33945c877c4da7248b83275d841f2da53febc617b88d0e0d4ab46d96385
-
SHA512
cf1aab34461f3039df9a940169639aa9f98bbd4254aa4eb7f073fc103582f5a12c59943cc1d394d764fb9bdbaa1411391b29a7e0e048651b147b0e482a247c99
-
SSDEEP
1536:KQ33ffjYCbtVNPoFcyz6BgkLjBLN3mYGaeBg1AXI8b8NDNglUu991BdGpGIOD:KQHHjYCbSBz6BgkxLIuAPbEDNgN91Bdp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75c8c33945c877c4da7248b83275d841f2da53febc617b88d0e0d4ab46d96385
Files
-
75c8c33945c877c4da7248b83275d841f2da53febc617b88d0e0d4ab46d96385.dll windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ