e79952f4164fe065e8ac7711d4205b10_dll64_JC[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

e79952f4164fe065e8ac7711d4205b10_dll64_JC.dll
Size

606KB
MD5

e79952f4164fe065e8ac7711d4205b10
SHA1

28bcba8fa2dc03439cb5fc412570c955a1f94eaa
SHA256

6a4e1f5bf290533cd9548a3ad645fbee73ea79c4478d5f1e883fd09a25ce72d5
SHA512

c872521af4787c4426f5df3a552b0a45bffad6dfeb9f13bea41566f899f3a54515c8b11d6cab77e3cc0f3f2f7fe02672b84f86d9a8331409670a8869fc999859
SSDEEP

6144:BOlvu/TFrIaqPA7lqPD5SOIjy+QafObWoYOfL+rYx9Wxmn+seqgufL:4QmaqI78D8W+QafZo6Yftp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e79952f4164fe065e8ac7711d4205b10_dll64_JC.dll

Files

e79952f4164fe065e8ac7711d4205b10_dll64_JC.dll
.dll windows:6 windows x64

3c71b5c40f781d5b06be8b08b134ddf0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
LoadLibraryW
lstrcmpiW
lstrlenA
MultiByteToWideChar
SetFileAttributesW
LoadLibraryExA
ExpandEnvironmentStringsA
GetPrivateProfileIntW
WideCharToMultiByte
lstrlenW
lstrcmpA
LoadLibraryExW
ReadFile
GetFileSize
DeleteFileW
GetFileAttributesW
GetProcAddress
FreeLibrary
SetEndOfFile
GetTimeZoneInformation
GetFullPathNameW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetVersionExW
GetCurrentDirectoryW
SetCurrentDirectoryW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
CreateProcessW
SetLastError
SetFilePointer
GetModuleFileNameW
GetModuleHandleExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedPushEntrySList
InterlockedFlushSList
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
HeapFree
HeapAlloc
GetCurrentThread
GetStdHandle
GetFileType
GetStringTypeW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
SetConsoleCtrlHandler
GetFileSizeEx
SetFilePointerEx
SetStdHandle
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadConsoleW
OutputDebugStringW
WriteConsoleW
GetUserDefaultUILanguage
CopyFileW
GetPrivateProfileStringW
GetCurrentProcessId
WritePrivateProfileStringW
lstrcmpW
GlobalFree
GlobalAlloc
GetLastError
CloseHandle
CreateFileW
IsProcessorFeaturePresent
VerifyVersionInfoW
FindFirstFileW
RemoveDirectoryW
GetSystemWindowsDirectoryW
LocalFree
CreateDirectoryW

winspool.drv

GetPrinterW
ClosePrinter
GetPrinterDriverDirectoryW
SetPrinterDataW
EnumPrintersA
OpenPrinterA
GetPrinterDriverW
GetPrinterDataW
EnumPortsW
OpenPrinterW
GetPrinterDataExW

gdi32

DeleteDC
CreateDCW
ExtEscape

ole32

CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeEx

advapi32

RegOpenKeyExA
CryptHashData
CryptCreateHash
CryptDecrypt
CryptEncrypt
CryptDestroyKey
CryptDeriveKey
CryptReleaseContext
CryptAcquireContextW
CryptDestroyHash
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetUserNameW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExA

shlwapi

PathStripPathW

ntdll

RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
VerSetConditionMask

user32

CharLowerBuffW
GetWindowRect
TrackPopupMenu
AppendMenuW
WinHelpW
SystemParametersInfoW
DestroyMenu
CreatePopupMenu
PostMessageW
LoadStringW

shell32

SHGetFolderPathW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

Exports

Exports

CIJSM_Close
CIJSM_EnumStatus
CIJSM_ExecuteEid
CIJSM_ExecuteStatusMonitor
CIJSM_FreeDeviceID
CIJSM_FreeInkInfo
CIJSM_FreeReadData
CIJSM_FreeStatus
CIJSM_FreeSummaryStatus
CIJSM_GetDeviceID
CIJSM_GetInkInfo
CIJSM_GetReadData
CIJSM_GetStatusSnap
CIJSM_GetSummaryStatus
CIJSM_GetVersion
CIJSM_IsInkAvailable
CIJSM_IsPrinterReady
CIJSM_Open
CIJSM_QuerySupportEid
CIJSM_ReleaseStatusSnap
CIJSM_ResetEidSettings
CIJSM_ResetWindowDisplayLevel
CIJSM_SetAddParamEid
CIJSM_SetButtonNameEid
CIJSM_SetMainWindowDisplayLevel
CIJSM_SetMessageWindowDisplayLevel
CIJSM_SetMessageWindowDisplayLevel2
CIJSM_SetSendInfoEid
CIJSM_SetShowUIEid
CIJSM_SetUiControlDisplayLevel
CIJSM_SetUrlEid

Sections

.text
Size: 458KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c71b5c40f781d5b06be8b08b134ddf0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winspool.drv

gdi32

ole32

advapi32

shlwapi

ntdll

user32

shell32

version

Exports

Exports

Sections

.text Size: 458KB - Virtual size: 458KB

.rdata Size: 108KB - Virtual size: 108KB

.data Size: 3KB - Virtual size: 10KB

.pdata Size: 31KB - Virtual size: 30KB

.gfids Size: 512B - Virtual size: 376B

.rsrc Size: 1024B - Virtual size: 888B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 458KB - Virtual size: 458KB

.rdata
Size: 108KB - Virtual size: 108KB

.data
Size: 3KB - Virtual size: 10KB

.pdata
Size: 31KB - Virtual size: 30KB

.gfids
Size: 512B - Virtual size: 376B

.rsrc
Size: 1024B - Virtual size: 888B

.reloc
Size: 2KB - Virtual size: 2KB