2c17775b212c0b4ef9360e9426cf9b50_dll32_JC[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

2c17775b212c0b4ef9360e9426cf9b50_dll32_JC.dll
Size

2.3MB
MD5

2c17775b212c0b4ef9360e9426cf9b50
SHA1

a69eb3dc69728f5d0dc9074873f6fe5a31fc2edc
SHA256

2d389d1ac7a583560b692562b16ffe806d3bf281f1a8be42963a8581cb6b7aa8
SHA512

62d214d807750e2d198ab7555e604796e906a1e779046db8e836f95c0f1440949f8f76fb569ce157742a7ff2130d3577481d1be99356b13a0394cc46cbd4df19
SSDEEP

49152:KWYnlAbkoJT3b5iZdeDcuYrujIdAOXWsE4ohud38ud+0mBP0:dYlAZJT3b5ivvroILedhG38+GBs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c17775b212c0b4ef9360e9426cf9b50_dll32_JC.dll

Files

2c17775b212c0b4ef9360e9426cf9b50_dll32_JC.dll
.dll windows:5 windows x86

0c931b3bace32cfa0b10d3ec49d67604

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wintrust

WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain

msvcrt

putc

oleaut32

GetRecordInfoFromGuids
SysAllocStringLen
GetErrorInfo
LoadTypeLibEx

clusapi

CloseClusterResource

kernel32

LocalAlloc
GetModuleFileNameW
GetBinaryTypeW
Process32FirstW
EnterCriticalSection
VirtualAlloc
InterlockedPushEntrySList
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetProcessHeap
SetStdHandle
GetVersionExA
WaitForSingleObject
GetModuleHandleW
GetModuleHandleA
GetProcAddress

ws2_32

select
WSAGetLastError

lz32

LZClose
LZOpenFileA

version

GetFileVersionInfoW

gdi32

AnimatePalette
GetWinMetaFileBits
EndPath

user32

GetTabbedTextExtentW
CreateWindowExA
ShowWindow
ModifyMenuW
PostQuitMessage
ShowScrollBar
UnhookWindowsHookEx
SetCursorPos
GetUpdateRgn
GetSysColor

winmm

waveInGetID
waveInStart

setupapi

SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA

winspool.drv

EnumPrintersW

advapi32

GetSecurityDescriptorSacl
RegCloseKey

rasapi32

RasGetEntryPropertiesA

ole32

OleBuildVersion

shlwapi

StrStrIW

psapi

GetProcessImageFileNameW

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 892KB - Virtual size: 888KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c931b3bace32cfa0b10d3ec49d67604

Headers

DLL Characteristics

File Characteristics

Imports

wintrust

msvcrt

oleaut32

clusapi

kernel32

ws2_32

lz32

version

gdi32

user32

winmm

setupapi

winspool.drv

advapi32

rasapi32

ole32

shlwapi

psapi

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 56KB - Virtual size: 57KB

.qdata Size: 892KB - Virtual size: 888KB

DATA Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 28KB - Virtual size: 27KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 56KB - Virtual size: 57KB

.qdata
Size: 892KB - Virtual size: 888KB

DATA
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 28KB - Virtual size: 27KB