71203eadebe6133a9dc3a1c02d83e830_dll32_JC[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

71203eadebe6133a9dc3a1c02d83e830_dll32_JC.dll
Size

200KB
MD5

71203eadebe6133a9dc3a1c02d83e830
SHA1

8f95f596369f58ffdaec6ba0a78752cc492ad72f
SHA256

cc79e52443f9cfd7ed4f1e5216f205a7eea5276993716c3ba58466359810491b
SHA512

05b6a667daac7d45ba59272a8f27691899b68a343d6424611a0d94481dada2cca2725142af9c21acfb14ce88444b837d3f4b344666fd299227148586eb211425
SSDEEP

3072:J4uAWYRhmluiJ3Bsw1DmoJOL1BN5NeeVJmlaHETUt8EV8fpuQSTWPtX:J4uAwlui9KayjBV6TKvV8ft

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71203eadebe6133a9dc3a1c02d83e830_dll32_JC.dll

Files

71203eadebe6133a9dc3a1c02d83e830_dll32_JC.dll
.dll windows:4 windows x86

433e7ec59341ece5671794fcfa580fbb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
RegisterWindowMessageA
DestroyWindow
PostMessageA
SetForegroundWindow
SetActiveWindow
AttachThreadInput
IsWindowVisible
CallWindowProcA
SetWindowTextA
GetForegroundWindow
GetClassNameA
GetWindowTextA
GetWindowThreadProcessId
GetWindow
MessageBoxA

kernel32

GetLastError
TlsGetValue
SetLastError
TlsFree
Sleep
GetCurrentProcessId
OpenProcess
CloseHandle
GetTickCount
GetModuleHandleA
GetVolumeInformationA
GlobalAlloc
InitializeCriticalSection
RtlMoveMemory
GetProcAddress
EnterCriticalSection
GetCurrentDirectoryA
CreateFileA
SetFilePointer
WriteFile
LeaveCriticalSection
GlobalFree
IsBadReadPtr
lstrlenA
lstrcpyn
CreateThread
SetHandleCount
Module32First
GetCurrentThreadId
QueryPerformanceCounter
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
GetFileSize
ReadFile
VirtualProtect
HeapDestroy
GetProcessHeap
HeapCreate
HeapReAlloc
HeapAlloc
HeapFree
ExitProcess
GetUserDefaultLCID
GetLocalTime
CreateDirectoryA
GetModuleFileNameA
FreeLibrary
LoadLibraryA
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
VirtualFree
RaiseException
LCMapStringW
CreateToolhelp32Snapshot
FlushFileBuffers
TlsAlloc
SetStdHandle
TlsSetValue
GetCurrentProcess
TerminateProcess
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
InterlockedIncrement
InterlockedDecrement
GetVersion
GetCommandLineA
VirtualAlloc

advapi32

RegDeleteKeyA
RegOpenKeyExA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptReleaseContext
CryptCreateHash
CryptAcquireContextA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

winmm

timeGetTime

ws2_32

closesocket
inet_ntoa
ntohs
inet_addr
htons
send
WSAStartup
recv
gethostbyname

shell32

SHGetFileInfoA
Shell_NotifyIconA

ole32

CoUninitialize
OleRun
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoInitialize

oleaut32

LHashValOfNameSys
LoadTypeLi
VarR8FromBool
VarR8FromCy
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
VariantInit
VariantChangeType
SafeArrayCreate
SysAllocString
VariantClear
SafeArrayDestroy
RegisterTypeLi

Exports

Exports

ZHURU_chshh
recvA
sendA

Sections

.text
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

433e7ec59341ece5671794fcfa580fbb

Headers

File Characteristics

Imports

user32

kernel32

advapi32

winmm

ws2_32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 156KB - Virtual size: 152KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 20KB - Virtual size: 72KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 156KB - Virtual size: 152KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 20KB - Virtual size: 72KB

.reloc
Size: 12KB - Virtual size: 8KB