0cc3d697bf49783a71d03e8b2e94f150_dll32_JC[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

0cc3d697bf49783a71d03e8b2e94f150_dll32_JC.dll
Size

144KB
MD5

0cc3d697bf49783a71d03e8b2e94f150
SHA1

58a1d63e1d1d2c7059b3f69607b4c47c3117d9bf
SHA256

04fef85b0edefe368d1a601a9dda728107906251d783799a044a11b33ef7ad0b
SHA512

7530a5190850f76e5095493c81f451b6c345758d0eeba9577cc54337cbfa8d8cf1401d98ac295e7c62e6c8853ef9c6efcd7c1cbba3c231ab4469eddad9eee00b
SSDEEP

3072:32Uqf58dJF+9JBcuiKpkW1d7Sb+r2ptMKphnt0:3qgoJBcuiA7Sb+r2pP0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cc3d697bf49783a71d03e8b2e94f150_dll32_JC.dll

Files

0cc3d697bf49783a71d03e8b2e94f150_dll32_JC.dll
.dll windows:4 windows x86

ea65a956b5b3cf4ae644205bc982f56a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

crypt32

CertSetCertificateContextProperty
CertCloseStore
CertAddCertificateContextToStore
CertGetEnhancedKeyUsage
CertEnumCertificatesInStore
CertCreateCertificateContext
CertOpenStore
CertCompareCertificate
CertDeleteCertificateFromStore
CertFreeCertificateContext

winscard

SCardControl
g_rgSCardT0Pci
g_rgSCardT1Pci
SCardTransmit
SCardReconnect
SCardDisconnect
SCardStatusA
SCardConnectA
SCardReleaseContext
SCardEstablishContext
SCardListReadersA
SCardGetStatusChangeA
SCardFreeMemory

advapi32

RegSetValueExA
SetKernelObjectSecurity
GetTokenInformation
OpenProcessToken
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
IsValidSid
InitializeSecurityDescriptor
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
SetSecurityDescriptorDacl

user32

MessageBoxA
PostMessageA
GetForegroundWindow

rpcrt4

UuidToStringA
UuidCreate
RpcStringFreeA

hid

HidD_FreePreparsedData
HidP_GetCaps
HidD_GetPreparsedData
HidD_GetHidGuid
HidD_GetFeature
HidD_SetFeature

setupapi

SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces

msvcrt

_adjust_fdiv
_initterm
memcmp
memset
memcpy
fgets
mbstowcs
fread
fwrite
strchr
strrchr
sprintf
vsprintf
fopen
fprintf
fclose
strstr
malloc
free
_strnicmp
_strupr
_strlwr
_stricmp

kernel32

GetCurrentProcess
GetFileSize
GetFileAttributesA
LockResource
LoadResource
SizeofResource
FindResourceA
OpenFileMappingA
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetVersion
LocalAlloc
LocalFree
FindFirstFileA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetPrivateProfileIntA
LoadLibraryA
DeleteFileA
FindNextFileA
FindClose
GetPrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetProcAddress
FreeLibrary
CreateNamedPipeA
ConnectNamedPipe
WriteFile
ReadFile
lstrlenA
GetCurrentProcessId
GetModuleFileNameA
OutputDebugStringA
GetTickCount
Sleep
GetVersionExA
GetLastError
CreateFileA
SetLastError
CreateMutexA
WaitForSingleObject
CloseHandle
ReleaseMutex

Exports

Exports

HIDCloseDevice
HIDEstablishContext
HIDGetSlotList
HIDGetTokenDevPath
HIDGetTokenDevPathEx
HIDGetTokenLabel
HIDOpenDevice
HIDOpenDeviceByDevPath
HIDOpenDeviceByIndex
HIDReleaseContext
HIDReset
IsHIDKey
NDCloseDevice
NDEstablishContext
NDEstablishContextEx
NDGetSlotList
NDGetSlotListProduce
NDGetTokenDevPath
NDGetTokenLabel
NDOpenDeviceByDevPath
NDOpenDeviceByIndex
NDReleaseContext
NDResetDevice
NDTransmit
PC_AddPinToCacheEx
PC_AddPinToCacheEx_Ex
PC_CreatePinCache
PC_CreatePinCache_Ex
PC_GetPinFromCache
PC_GetPinFromCache_Ex
PC_ReleasePinCache
PC_RemoveAllPinFromCache
PC_RemoveAllPinFromCache_Ex
PC_RemovePinFromCacheEx
PC_RemovePinFromCacheEx_Ex
PC_UpdatePinToCache
PC_UpdatePinToCache_Ex
SCardAPDU
SCardAppendRecord
SCardChangePin
SCardCreateDF
SCardCreateEF
SCardCreateFile
SCardCreateFileEx
SCardEraseDF
SCardEraseEF
SCardExternAuth
SCardGenerateRSAKey
SCardGetChallenge
SCardGetFreeSpace
SCardGetFreeSpaceEx
SCardGetSerialNo
SCardPubKeyEnc
SCardRSAPriKeyDec
SCardRSASign
SCardRSAVerify
SCardReadBin
SCardReadBinEx
SCardReadFixedRecord
SCardReset
SCardSelectFileByID
SCardSetSerialNo
SCardUnlockPin
SCardUpdateBin
SCardUpdateFixedRecord
SCardVerifyPin
SCardWriteKey
SCardWriteKeyDESMAC
UDKCloseDevice
UDKEstablishContext
UDKGetSlotList
UDKGetTokenDevPath
UDKGetTokenLabel
UDKIszteByHD
UDKOpenDeviceByIndex
UDKReleaseContext
UDKReset
WDCryptGetParam
WDCryptGetString
WDCryptIsCompatible
WDCryptIsSupportedReader
WDGetPrefixByTokenName
WDGetTempCertDIR
WDLock
WDSCardAddPkcsObjectFileId
WDSCardAddRSAKeytoContainer
WDSCardAuth
WDSCardChangeSOPin
WDSCardChangeUserPin
WDSCardChangeUserPin_Ex
WDSCardCloseFile
WDSCardConnectToken
WDSCardCreateFile
WDSCardCreateFileExEx
WDSCardCreateRSAKeyFile
WDSCardDelCertInContainer
WDSCardDelContainer
WDSCardDelFile
WDSCardDelKeyInContainer
WDSCardDelPKCS11Object
WDSCardDeleteCertFromDiskAndIE
WDSCardDisconnectToken
WDSCardEncodeSignDataEx
WDSCardEnumContainer
WDSCardEraseAllFiles
WDSCardEstablishContext
WDSCardGenContainerName
WDSCardGenRSAKey
WDSCardGenRSAKeyThreadProc
WDSCardGenRandom
WDSCardGenerateTokenSN
WDSCardGetCertCount
WDSCardGetContainerName
WDSCardGetCurrentFileID
WDSCardGetFileID
WDSCardGetFileIndex
WDSCardGetFileSize
WDSCardGetFileType
WDSCardGetKeySetInfo
WDSCardGetPINLeftTimes
WDSCardGetProvName
WDSCardGetPublicKey
WDSCardGetRSAContainer
WDSCardGetRSAContainerFromCertindex
WDSCardGetRSAKeyIndex
WDSCardGetRSAKeyType
WDSCardGetRSAKeyfromContainer
WDSCardGetRSAKeyfromContainerEx
WDSCardGetReaderName
WDSCardGetSlotList
WDSCardGetSlotName
WDSCardGetTokenATR
WDSCardGetTokenHandle
WDSCardGetTokenInfo
WDSCardGetTokenLabel
WDSCardGetTokenMaterKeyType
WDSCardGetTokenSN
WDSCardGetTokenStatus
WDSCardGetTokenVersion
WDSCardGetTotalSlotList
WDSCardGetVersion
WDSCardImportRSAKeysToCard
WDSCardInit
WDSCardInitEx
WDSCardNewContainer
WDSCardOpenContainer
WDSCardOpenDefaultContainer
WDSCardOpenFile
WDSCardRSAPrivateKeyDecrypt
WDSCardRSAPublicKeyEncrypt
WDSCardRSASign
WDSCardRSASignData
WDSCardRSASignEx
WDSCardRSAVerifySignature
WDSCardReadBin
WDSCardReadCACert
WDSCardReadCert
WDSCardReadCertEx
WDSCardReadFile
WDSCardRegisterCert
WDSCardReleaseContext
WDSCardReset
WDSCardSCB2Decrypt
WDSCardSCB2Decrypt_CBC
WDSCardSCB2Encrypt
WDSCardSCB2Encrypt_CBC
WDSCardSSF33Decrypt
WDSCardSSF33Decrypt_CBC
WDSCardSSF33Encrypt
WDSCardSSF33Encrypt_CBC
WDSCardSetCertState
WDSCardSetNextFileID
WDSCardSetPINLeftTimes
WDSCardUnblockUserPin
WDSCardUnblockUserPin_Ex
WDSCardVerifySOPin
WDSCardVerifyUserPin
WDSCardVerifyUserPin_Ex
WDSCardWaitForSlotEvent
WDSCardWaitForSlotEvent_Ex
WDSCardWriteBin
WDSCardWriteCACert
WDSCardWriteCert
WDSCardWriteCertEx
WDSCardWriteFile
WDSCardWritePKCS11Object
WDSCardWriteProvName
WDSCardWriteTokenInfo
WDSCardWriteTokenLabel
WDSCardWriteTokenSN
WDSCardZTECloseChannel
WDSCardZTEEndecrypt
WDSCardZTEOpenChannel
WDUnlock

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea65a956b5b3cf4ae644205bc982f56a

Headers

File Characteristics

Imports

crypt32

winscard

advapi32

user32

rpcrt4

hid

setupapi

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 108KB - Virtual size: 106KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 108KB - Virtual size: 106KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB