e00790e2a4039fdf5808e780508cca00_dll64_JC[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

e00790e2a4039fdf5808e780508cca00_dll64_JC.dll
Size

526KB
MD5

e00790e2a4039fdf5808e780508cca00
SHA1

f1ddc40c8fb209de0cb3c94749cc01fc49dca3a8
SHA256

81b5b38c644edddd7128b79b7b50348fcb09989453f09671922aabb96f0db17f
SHA512

23f04394d68fd99315e706cc6de8f23be9492e63525cc464f97cdc7a844b6eb041dec27b2fa4b5cef625b7a6e789d1ecdae1bd86dd2f60f8abacc6539fe33c1d
SSDEEP

6144:Gr+vxqb3Gbe4f/dgFeZ7A7oh+oYSKoyqw6D8ryNZjdsABZYoffe2LdkWjGQ8HYWw:Gr2gLGbe4f27ooy0qw+LNZh9fz6Ysz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e00790e2a4039fdf5808e780508cca00_dll64_JC.dll

Files

e00790e2a4039fdf5808e780508cca00_dll64_JC.dll
.dll regsvr32 windows:6 windows x64

b24157745890716277178238c1395768

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FindClose
ReadFile
CloseHandle
GetProcessHeap
GetErrorMode
GetLargePageMinimum
AreFileApisANSI
GetSystemDefaultLangID
GetACP
GetCommandLineA
GetThreadLocale
GetEnvironmentStringsW
SetFileApisToOEM
IsDebuggerPresent
IsSystemResumeAutomatic
GetCurrentThreadId
GetUserDefaultLangID
TlsAlloc
VirtualAlloc
GetCurrentProcess
GetUserDefaultUILanguage
RaiseException
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
FindNextFileA
MultiByteToWideChar
LoadResource
SizeofResource
FindResourceW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
GetModuleFileNameW
lstrcmpiW
FreeLibrary
FreeEnvironmentStringsW
GetCommandLineW
GetOEMCP
IsValidCodePage
FindFirstFileExA
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
HeapReAlloc
GetTickCount64
SetStdHandle
WriteConsoleW
CreateFileW
DecodePointer
RtlUnwind
HeapSize
GetFileType
GetStdHandle
HeapAlloc
HeapFree
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
TerminateProcess
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSectionAndSpinCount
SetLastError
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
EncodePointer
LCMapStringEx
GetStringTypeW

user32

GetForegroundWindow
AnyPopup
IsProcessDPIAware
GetKBCodePage
GetCursor
GetShellWindow
EmptyClipboard
GetDesktopWindow
GetFocus
GetOpenClipboardWindow
CloseClipboard
InSendMessage
CreateMenu
GetClipboardViewer
CountClipboardFormats
CharNextW
IsWow64Message
GetDialogBaseUnits
SetProcessDPIAware
DestroyCaret

advapi32

RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW

ole32

CoUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoFreeUnusedLibraries

oleaut32

VarUI4FromStr

Exports

Exports

DllMain
DllRegisterServer
DllUnregisterServer
EntryFunct
amjuvdnigrmufwjwg
aqbstivigfw
aqvsnduqutzdtxeg
awiuezxfnh
ayickzlrimg
bbacynbcw
bheycqjzym
bnebdto
cbomoeiuix
cefosrw
chdeuehg
cpldoombnsajxj
cujqrlx
cwravefjeqkzcdsin
dgxuogtmsqkqnkzts
dthuwqxyzt
dvxcorseqzycwjweb
eidzkydzsatqtocs
eqkhnimx
eqwycupsq
fbowcgdodwksbxja
fdekrrmxbccghzvo
feinscr
flwkllpelmp
ftcofhwf
giyufiyur
gpvpjqeje
gqjzargktcj
gxjqjgsdnqtpkntjk
gysocfaqm
gzdsnqwlbfd
hdeltefj
hrxskplfssvw
hsepzwgt
hteykwocfu
hujmiyfhoxpujhky
iglyfamzxejncfj
ilhcsnhxrj
jcxlggq
jjqjxxcvwhm
klfrjogqdlh
knibccsvxte
krzftacrbhkugzpwu
kwdeqyakpxa
kxhwfjaroqszghwft
lksyyxsieedlsp
lleflonlx
mmnzjfirtvm
muriwhjiroeirrdck
mwpuznmn
npmfgyxeeog
orvhqfveucfvcbc
owbzdom
pamxxlbvxqkzx
pblfuascmbrb
pdanxxfhjdgqgc
pdiotnsanrpfgcs
pfwekcpzlqutdsc
pgqynrgcn
pgwkkfwzyttpdwc
qbeaamscrsmljixuo
qbegelfthqob
qsihselysx
rhejldqzixtnh
rjdrercziofyty
slsooxb
smkyuywr
sojtxrmkqhwquafia
sptratbtbugym
srptnkynaf
tkthqdhpglgfjqrbg
tntglcaqmm
tpdezxupbgzki
tuytoluurbem
uebbmfspgkcm
uoumjqrrrjwp
uyexsrgoxbgypto
valbqacfzmmzfa
vfakdydxcdf
vffypqxrj
vilyrftco
vkalkbqzconn
vtgnsujouioeggdlk
wbjrfqmruslb
wpkixiney
wunmelzeoomwae
wzhoernbtoxocdf
xfxgiiu
xqdyumspe
xsgpdvphgslouh
yigdxfhlavm
ywktftw

Sections

.text
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b24157745890716277178238c1395768

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 134KB - Virtual size: 134KB

.rdata Size: 77KB - Virtual size: 76KB

.data Size: 4KB - Virtual size: 10KB

.pdata Size: 7KB - Virtual size: 7KB

_RDATA Size: 512B - Virtual size: 252B

.rsrc Size: 298KB - Virtual size: 298KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 134KB - Virtual size: 134KB

.rdata
Size: 77KB - Virtual size: 76KB

.data
Size: 4KB - Virtual size: 10KB

.pdata
Size: 7KB - Virtual size: 7KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 298KB - Virtual size: 298KB

.reloc
Size: 2KB - Virtual size: 2KB