28bbd804173d5da9a5eb5c39c8fd8050_dll32_JC[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

28bbd804173d5da9a5eb5c39c8fd8050_dll32_JC.dll
Size

610KB
MD5

28bbd804173d5da9a5eb5c39c8fd8050
SHA1

c031b03838268a1985079c8134e03565b34f0d57
SHA256

825ea04544ab4ac10adb0723fb5e9bd06522043a05e7326e5fe71af5307d15eb
SHA512

43907f75481db88dfa91d34ea170b48a871d9bf5f1aeae158de2e525be68ef4f9ca02034930b85a7b9c743622442c23dbac62c35e052aa0791321a41adda4317
SSDEEP

3072:MNk677YcCPLoqMh6hUVlWHQ04FU44cUcb+nI67pPQMjM/a:gh2LoqHh8304ym

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28bbd804173d5da9a5eb5c39c8fd8050_dll32_JC.dll

Files

28bbd804173d5da9a5eb5c39c8fd8050_dll32_JC.dll
.dll windows:4 windows x86

6a24f95544ee42edca55133c6a0064f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

wcscat
wcscspn
_itoa
_ftol
wcscpy
wcslen
atol
RtlUnicodeToMultiByteN
_ltoa
_ultoa
RtlMultiByteToUnicodeN

user32

CheckDlgButton
GetClientRect
wsprintfW
FindWindowW
MessageBeep
SendDlgItemMessageW
GetDlgItem
SetDlgItemTextW
LoadStringW
GetWindowRect
SetWindowPos
LoadIconW
DrawIcon
GetSysColor
FillRect
SetFocus
GetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
MessageBoxW
DialogBoxParamW
IsDlgButtonChecked
CheckRadioButton
GetDC
ReleaseDC
SetWindowTextW
GetWindowLongW
InvalidateRect
EndDialog
EnableWindow
SendMessageW
WinHelpW

kernel32

lstrlenW
GetModuleFileNameW
FreeLibrary
GetProcAddress
LoadLibraryA
HeapDestroy
GlobalFree
HeapAlloc
HeapCreate
GetLastError
GlobalAlloc
lstrcpynW
LoadLibraryW
lstrcpyW
SetLastError
lstrcatW
WritePrivateProfileStringW
GetWindowsDirectoryW
lstrcmpW
LocalAlloc
GetPrivateProfileStringW
OpenFile
LockResource
LoadResource
FindResourceW
GlobalUnlock
GlobalLock
GetSystemDirectoryW
GetACP
GetLocaleInfoW

winspool.drv

ClosePrinter
GetPrinterDriverW
GetPrinterDataW
GetPrinterW
SetPrinterW
SetPrinterDataW
OpenPrinterW
GetPrinterDriverDirectoryW

gdi32

SetBkMode
CreatePalette
SelectPalette
RealizePalette
SetDIBitsToDevice
CreateSolidBrush
CreateRectRgn
PaintRgn
TextOutW
EnumFontsW
GetTextMetricsW
GetTextExtentPointW
SetBkColor
MoveToEx
LineTo
GetDeviceCaps
CreateFontIndirectW
SetTextColor
GetTextAlign
SetTextAlign
ExtEscape
ExtTextOutW
DeleteObject
SetROP2
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
CreatePen
SelectObject
GetStockObject
SelectClipRgn
Rectangle

comctl32

ord17

Exports

Exports

DevQueryPrintEx
DllInitialize
DrvAdvancedDocumentProperties
DrvConvertDevMode
DrvDeviceCapabilities
DrvDevicePropertySheets
DrvDocumentEvent
DrvDocumentProperties
DrvDocumentPropertySheets
DrvPrinterEvent
DrvUpgradePrinter
PrinterProperties
_About@16
_About_DlgProc@16
_Accessories_DlgProc@16
_Paper_DlgProc@16
_PrintQuality_DlgProc@16
_Setup_DlgProc@16

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 586B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 493KB - Virtual size: 493KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a24f95544ee42edca55133c6a0064f4

Headers

File Characteristics

Imports

ntdll

user32

kernel32

winspool.drv

gdi32

comctl32

Exports

Exports

Sections

.text Size: 65KB - Virtual size: 65KB

.data Size: 6KB - Virtual size: 15KB

.edata Size: 1024B - Virtual size: 586B

.rsrc Size: 493KB - Virtual size: 493KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 65KB - Virtual size: 65KB

.data
Size: 6KB - Virtual size: 15KB

.edata
Size: 1024B - Virtual size: 586B

.rsrc
Size: 493KB - Virtual size: 493KB

.reloc
Size: 7KB - Virtual size: 7KB