jli[.]dll[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

jli.dll.exe
Size

184KB
MD5

42793cc4a3748141f6cc933ec9825132
SHA1

396ee3230f292764ed471ea440d9bf708099c5bc
SHA256

35a8a5f09c4584c4bf33f50782df3966d42c65fb9b2803d60a6c2c2f2c95f765
SHA512

490a67f48b3e059b2d5adf924913581c8fad69a0fedb3d4844913eb45700b6ecbf431d354d00a5a34259efb2ee4c7b7ede42f5e5b42f9cb59192c61c12d8877d
SSDEEP

3072:iPEwlUMCb6me+inrMGn+VVSViIQd05tjTD5t7XMHi+XUKFhnJ6oWaUkTBfZoWAK0:LKMbeznrWSVC0jTD5xMCEPFhXWZkTBhv

Score

1^/10

Malware Config

Signatures

Files

jli.dll.exe
.dll windows x64

3553c7d496c64846199a26842d4585f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

comctl32

InitCommonControlsEx

user32

CharNextExA
MessageBoxA

kernel32

SetEndOfFile
GetTimeZoneInformation
GetCommandLineA
CloseHandle
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
GetExitCodeProcess
GetExitCodeThread
CreateProcessA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LocalFree
FormatMessageA
LoadLibraryA
FindClose
FindFirstFileA
FindNextFileA
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapFree
GetCurrentProcessId
CreateThread
GetCurrentThreadId
ExitThread
LoadLibraryExW
HeapAlloc
HeapReAlloc
SetFilePointerEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
DeleteCriticalSection
RtlUnwindEx
GetStdHandle
GetFileType
WriteFile
GetModuleFileNameW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetProcessHeap
SetEnvironmentVariableA
SetEnvironmentVariableW
GetFileAttributesExW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetStdHandle
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
ReadFile
ReadConsoleW
OutputDebugStringW
HeapSize
CompareStringW
LCMapStringW
GetStringTypeW
WriteConsoleW
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFullPathNameW
GetCurrentDirectoryW
CreateFileW

Exports

Exports

JLI_CmdToArgs
JLI_GetStdArgc
JLI_GetStdArgs
JLI_Launch
JLI_ManifestIterate
JLI_MemAlloc
JLI_ReportErrorMessage
JLI_ReportErrorMessageSys
JLI_ReportExceptionDescription
JLI_ReportMessage
JLI_SetTraceLauncher

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3553c7d496c64846199a26842d4585f8

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

comctl32

user32

kernel32

Exports

Exports

Sections

.text Size: 120KB - Virtual size: 119KB

.rdata Size: 49KB - Virtual size: 49KB

.data Size: 6KB - Virtual size: 15KB

.pdata Size: 5KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 912B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 120KB - Virtual size: 119KB

.rdata
Size: 49KB - Virtual size: 49KB

.data
Size: 6KB - Virtual size: 15KB

.pdata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 1KB - Virtual size: 1KB