HvTkcoed
Static task
static1
Behavioral task
behavioral1
Sample
ede6e01cf799d6b96b8e57c0804c91ed11e46e56d4b3ade8f5d7727fc5286edf_JC.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ede6e01cf799d6b96b8e57c0804c91ed11e46e56d4b3ade8f5d7727fc5286edf_JC.dll
Resource
win10v2004-20230703-en
General
-
Target
ede6e01cf799d6b96b8e57c0804c91ed11e46e56d4b3ade8f5d7727fc5286edf_JC.dll
-
Size
13KB
-
MD5
b0e9caea8fd19f84db5a9e8479a080a7
-
SHA1
57d3720db7fa56bca29a200b8156cb2e064170ea
-
SHA256
ede6e01cf799d6b96b8e57c0804c91ed11e46e56d4b3ade8f5d7727fc5286edf
-
SHA512
5a45cffd972c5caa3d5aa77c5ebffb70eceab0293e96742897ac624882deb00deaece56b6f62534783c4f56ac2ca7fdb9c6916009a36de8be75538701d43a4b9
-
SSDEEP
384:Wcw2K3QfiQGh5X7v95zcJmLnbIe66qXMyUHwSFrEykN:Wcwd3bQ65rv95wsLnse6D9SqX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ede6e01cf799d6b96b8e57c0804c91ed11e46e56d4b3ade8f5d7727fc5286edf_JC.dll
Files
-
ede6e01cf799d6b96b8e57c0804c91ed11e46e56d4b3ade8f5d7727fc5286edf_JC.dll.dll windows x86
ef426f15136c05e55b613bc027fab15a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
memcpy
kernel32
VirtualAlloc
GetUserDefaultLangID
FatalAppExitA
SetCurrentDirectoryW
GlobalUnlock
GetCompressedFileSizeW
GetConsoleFontSize
msacm32
acmFormatEnumW
acmDriverDetailsA
acmFormatChooseW
acmStreamConvert
mpr
WNetDisconnectDialog1A
WNetAddConnection3A
WNetAddConnectionW
WNetCancelConnection2W
WNetAddConnection2A
WNetAddConnection2W
WNetGetResourceInformationA
WNetGetResourceInformationW
rtm
MgmDeRegisterMProtocol
RtmGetNextRoute
RtmDeleteRouteTable
RtmBlockConvertRoutesToStatic
wininet
FtpSetCurrentDirectoryW
InternetOpenA
ReadUrlCacheEntryStream
DeleteUrlCacheGroup
InternetCheckConnectionW
FindFirstUrlCacheContainerW
FtpRenameFileW
CommitUrlCacheEntryA
rpcrt4
CStdStubBuffer_Connect
I_RpcNsInterfaceExported
NdrMesSimpleTypeAlignSize
I_RpcConnectionSetSockBuffSize
comdlg32
ChooseColorW
CommDlgExtendedError
PageSetupDlgA
GetOpenFileNameW
FindTextW
GetFileTitleW
PrintDlgW
GetFileTitleA
Exports
Exports
Sections
.text Size: 512B - Virtual size: 445B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ