Static task
static1
Behavioral task
behavioral1
Sample
00afe65a74dffe7be5dc9ff3d2e38a50_dll32_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
00afe65a74dffe7be5dc9ff3d2e38a50_dll32_JC.dll
Resource
win10v2004-20230915-en
General
-
Target
00afe65a74dffe7be5dc9ff3d2e38a50_dll32_JC.dll
-
Size
200KB
-
MD5
00afe65a74dffe7be5dc9ff3d2e38a50
-
SHA1
894ef81d30bcc72cabf1a3523cd7e1c63511a87d
-
SHA256
d95e0959ecd62a531ec52ebe1b8490dd68e6c67ca9c43922d673dddc12b4ad99
-
SHA512
aecff8c48a98ab429fc10ab01e641e5b09cce91eb5fb4229cd8e4a2d91d24a0c24849f2c6f4c863225d2c2316c963694bae503806fecc3d797dec25005720665
-
SSDEEP
1536:5FQZ9wOYas8+vmTsAaLCILcFAGkp+EBCkCYcfuxKejy+G81wr07:XQo5J+TbjIKAFAEBC7Ycmyn6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00afe65a74dffe7be5dc9ff3d2e38a50_dll32_JC.dll
Files
-
00afe65a74dffe7be5dc9ff3d2e38a50_dll32_JC.dll.dll windows:6 windows x86
44a0d91b6f75179ddec467af2a2d7d39
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
Process32First
OpenProcess
ReadProcessMemory
Beep
ExitThread
Module32First
Process32Next
GetModuleFileNameA
CreateToolhelp32Snapshot
CloseHandle
GetCurrentProcessId
WriteProcessMemory
CreateThread
GetPrivateProfileStringA
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
WinExec
ExitProcess
user32
ShowWindow
GetCursorPos
GetWindowRect
RegisterClassExA
PostQuitMessage
LoadIconA
EnumWindows
MoveWindow
SetLayeredWindowAttributes
DefWindowProcA
PeekMessageA
CreateWindowExA
MessageBoxA
GetWindowThreadProcessId
TranslateMessage
GetAsyncKeyState
DispatchMessageA
GetSystemMetrics
LoadCursorA
mouse_event
gdi32
CreateSolidBrush
shell32
Shell_NotifyIconA
msvcp110
??Bid@locale@std@@QAEIXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_BADOFF@std@@3_JB
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
d3dx9_43
D3DXVec3Project
D3DXCreateLine
D3DXCreateFontA
D3DXMatrixMultiply
D3DXVec2Normalize
D3DXMatrixRotationYawPitchRoll
d3d9
Direct3DCreate9Ex
dwmapi
DwmExtendFrameIntoClientArea
msvcr110
_lock_file
memcpy
_libm_sse2_sqrt_precise
_libm_sse2_sin_precise
_libm_sse2_cos_precise
_libm_sse2_acos_precise
__CxxFrameHandler3
_CxxThrowException
_CIatan2
__clean_type_info_names_internal
_except_handler4_common
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_initterm_e
_initterm
_malloc_crt
free
_amsg_exit
__CppXcptFilter
??1type_info@@UAE@XZ
_stricmp
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
fputc
sprintf
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABV01@@Z
memmove
_unlock_file
ungetc
strstr
fgetpos
_fseeki64
fflush
atoi
fgetc
fsetpos
setvbuf
memset
_purecall
??3@YAXPAX@Z
memcpy_s
fwrite
fclose
exit
??2@YAPAXI@Z
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ