191466aeca83c112e4dd693d3355b068f78c46adb8d9d132d29eb10f68fcb00ddll_JC[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

191466aeca83c112e4dd693d3355b068f78c46adb8d9d132d29eb10f68fcb00ddll_JC.dll
Size

34KB
MD5

0056e6e4f6f215c189d6145834240f68
SHA1

9e2cca76b1e55b0fd2efe3646c28f3f40d224983
SHA256

191466aeca83c112e4dd693d3355b068f78c46adb8d9d132d29eb10f68fcb00d
SHA512

e585ee0075971e4841226589058db4656f2e3143d06c0509ce74a4aa2608c0d0cfd6e31368f2fcbb2d6df4d2170dab9ae707b8100e88a8d26f34daedb59f98ee
SSDEEP

768:c1CCRLQXVuvC2ei5c5z3Dmf+4nt0h6eE2AazMmxS27niPL0bbjt:c1CeOuvC2/W15JtkQSCn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
191466aeca83c112e4dd693d3355b068f78c46adb8d9d132d29eb10f68fcb00ddll_JC.dll

Files

191466aeca83c112e4dd693d3355b068f78c46adb8d9d132d29eb10f68fcb00ddll_JC.dll
.dll windows x86

969ed979bcbb9cc9e109e354589ac767

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
_adjust_fdiv
memset
free
memcpy
_initterm

shlwapi

StrRStrIW
PathRemoveExtensionA
UrlEscapeW
PathUnquoteSpacesW
PathRemoveBlanksA
PathIsFileSpecW
StrStrW
SHRegSetUSValueW
StrFromTimeIntervalA

kernel32

InitializeCriticalSection
lstrlenW
VirtualAlloc

wininet

InternetLockRequestFile
InternetCrackUrlA
InternetOpenUrlW
RetrieveUrlCacheEntryStreamA
FindNextUrlCacheContainerW
ShowSecurityInfo
IncrementUrlCacheHeaderData

loadperf

LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA

shell32

SHGetFileInfoW
ExtractAssociatedIconExW
ExtractIconA
ShellExecuteW
SHGetDesktopFolder

mscms

CheckBitmapBits
SpoolerCopyFileEvent
TranslateColors
OpenColorProfileW
UninstallColorProfileW
IsColorProfileValid
GetPS2ColorRenderingIntent

user32

SendInput
LoadMenuW
wsprintfW
UnloadKeyboardLayout
MapDialogRect
IMPSetIMEW
SetMenuItemInfoW
LoadAcceleratorsA
CloseWindow

pdh

PdhAddCounterW
PdhBrowseCountersW
PdhGetDataSourceTimeRangeW
PdhGetFormattedCounterArrayA
PdhConnectMachineA
PdhGetFormattedCounterArrayW
PdhUpdateLogA
PdhEnumMachinesW

ole32

ReadClassStm
OleQueryCreateFromData
OleCreateFromFileEx
ReadStringStream
UtGetDvtd32Info
OleLoad
UtConvertDvtd16toDvtd32

Exports

Exports

HvTkcoed

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

969ed979bcbb9cc9e109e354589ac767

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

shlwapi

kernel32

wininet

loadperf

shell32

mscms

user32

pdh

ole32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 7KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 7KB