590ed6b27db2d8077374f2e4f2678c40_dll32_JC[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

590ed6b27db2d8077374f2e4f2678c40_dll32_JC.dll
Size

2.6MB
MD5

590ed6b27db2d8077374f2e4f2678c40
SHA1

c9f8ca886d0be40df0509df8c35ae8e67458d4e4
SHA256

3260a5a5c11f5f30e2ea8ebbb19309ce04f17564b72a98afd821d961f84f570e
SHA512

49cfdeb4cb93037369e66ea6cd340779b6574f0c8c351a2a98f461fcfc78437dd159047da9d62b08e3b012190cdc4ea25ac7b24c4de049e9a78ff9845a4ba06a
SSDEEP

49152:+EaUdUrKiQvsyJNSrRpNMnL9tBYEiCHUZ28ekcRPIruFX/JBsQCqqncmGTR:sYcr2mqnL/B730Z1ekceETHC7cmGTR

Score

1^/10

Malware Config

Signatures

Files

590ed6b27db2d8077374f2e4f2678c40_dll32_JC.dll
.dll windows:5 windows x86

8584a7eef9fda9f73469ba23a5502417

Code Sign

49:a7:43:48:45:17:1c:f0:ea:f0:bf:28:07:25:46:37
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/06/2018, 00:00

Not After

12/06/2019, 23:59

Subject

CN=Johannes Schindelin,O=Johannes Schindelin,POSTALCODE=50968,STREET=Raderberger Str. 178,L=Cologne,ST=Northrhine/Westfalia,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

65:61:d5:7a:75:94:57:65:9e:04:1a:cc:f6:cd:cd:fa:5d:3d:fc:71:d7:0d:6a:f0:f5:65:69:fd:f5:ee:1c:26
Signer

Actual PE Digest

65:61:d5:7a:75:94:57:65:9e:04:1a:cc:f6:cd:cd:fa:5d:3d:fc:71:d7:0d:6a:f0:f5:65:69:fd:f5:ee:1c:26

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

SetBkMode

kernel32

GlobalFindAtomW
IsDebuggerPresent
WriteTapemark
GetModuleFileNameW
SetHandleInformation
SetupComm
SetConsoleCursorPosition
GetUserDefaultLangID
GetModuleFileNameA
GetBinaryTypeA
GetModuleHandleA

ws2_32

select

mprapi

MprAdminIsServiceRunning

msvfw32

DrawDibStart

user32

IsCharAlphaNumericA
GetParent

shlwapi

PathIsUNCA

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ZVqPQ
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

*saxC
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8584a7eef9fda9f73469ba23a5502417

Code Sign

49:a7:43:48:45:17:1c:f0:ea:f0:bf:28:07:25:46:37Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

65:61:d5:7a:75:94:57:65:9e:04:1a:cc:f6:cd:cd:fa:5d:3d:fc:71:d7:0d:6a:f0:f5:65:69:fd:f5:ee:1c:26Signer

Headers

File Characteristics

Imports

gdi32

kernel32

ws2_32

mprapi

msvfw32

user32

shlwapi

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 2.1MB - Virtual size: 2.1MB

.data Size: 116KB - Virtual size: 119KB

ZVqPQ Size: 164KB - Virtual size: 161KB

*saxC Size: 168KB - Virtual size: 165KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 40KB - Virtual size: 37KB

49:a7:43:48:45:17:1c:f0:ea:f0:bf:28:07:25:46:37
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

65:61:d5:7a:75:94:57:65:9e:04:1a:cc:f6:cd:cd:fa:5d:3d:fc:71:d7:0d:6a:f0:f5:65:69:fd:f5:ee:1c:26
Signer

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 2.1MB - Virtual size: 2.1MB

.data
Size: 116KB - Virtual size: 119KB

ZVqPQ
Size: 164KB - Virtual size: 161KB

*saxC
Size: 168KB - Virtual size: 165KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 40KB - Virtual size: 37KB