Static task
static1
Behavioral task
behavioral1
Sample
15adb8c6e8c2d271e96b0b9ef16e6670_dll32_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
15adb8c6e8c2d271e96b0b9ef16e6670_dll32_JC.dll
Resource
win10v2004-20230915-en
General
-
Target
15adb8c6e8c2d271e96b0b9ef16e6670_dll32_JC.dll
-
Size
308KB
-
MD5
15adb8c6e8c2d271e96b0b9ef16e6670
-
SHA1
66a49e6a7a8dafb7e4e2939729c4da7febede2a9
-
SHA256
fdbd02ea7e1a3d2ec77a763f5c209abf7bb038b5b5ff607243aa8b8b111bdf88
-
SHA512
1076154850be38758735e55ebf421cf49ab6a28585e088faca294682770faa6d3999be1ef5820ed4b61c1f7bc25411f10501b78ebf23767da48951cba7571da9
-
SSDEEP
6144:A49rZ3rQrIWYgGORyUDFFOvgbzofLrhCYOwVME0sCou+Fyjn4mO:AkrdrQFYglZFOcz4qE0sCou+FWO
Malware Config
Signatures
Files
-
15adb8c6e8c2d271e96b0b9ef16e6670_dll32_JC.dll.dll windows:5 windows x86
dd24cde3fdb1ea111d70b7c70cda075c
Code Sign
3f:b6:92:42:95:6b:73:bb:4c:d5:35:0d:e3:59:03:e3Certificate
IssuerCN=Root AgencyNot Before09/08/2012, 10:22Not After31/12/2039, 23:59SubjectCN=Acfun Guard,O=lolifun.net,1.2.840.113549.1.9.1=#0c14636c657374657239393340676d61696c2e636f6d0f:c9:cf:4d:47:cd:d1:70:ad:44:32:a3:47:41:3d:da:bf:3b:6c:a8Signer
Actual PE Digest0f:c9:cf:4d:47:cd:d1:70:ad:44:32:a3:47:41:3d:da:bf:3b:6c:a8Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
imm32
ImmSimulateHotKey
shlwapi
StrCmpW
ntdll
RtlUnwind
opengl32
glTranslatef
glu32
gluBuild2DMipmaps
user32
MessageBoxW
gdi32
CreateBitmap
advapi32
RegSetValueExW
winmm
timeGetTime
Exports
Exports
CreateInterface
Init
Sections
.text Size: 301KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE