9e9d5ae78f6fff694f6ddf35dc5b5ab0_dll32_JC[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

9e9d5ae78f6fff694f6ddf35dc5b5ab0_dll32_JC.dll
Size

120KB
MD5

9e9d5ae78f6fff694f6ddf35dc5b5ab0
SHA1

6373b06721184ff2490d84b4e5b16eeae6eeffa9
SHA256

866e5a15ee40709f39bfaadf37776d1edcc9d48d0533e59b4fd888934408e6c9
SHA512

6bd34ef2a71951dfe1a17a4042f953a1b3dc341fe97ef1e80f72fb9937320447387b34c93537ec775e6603fb1d7db321e6807b9366d5a66c2e55342d32f23099
SSDEEP

3072:Mf6I5cMjnqc5ZLDlE3sb0AR+Ovnd8P5tyK:MiCLDa3sbn7dMl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9e9d5ae78f6fff694f6ddf35dc5b5ab0_dll32_JC.dll

Files

9e9d5ae78f6fff694f6ddf35dc5b5ab0_dll32_JC.dll
.dll windows:6 windows x86

5e738a96218f62c1bef615628850da59

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

crypt32

CryptStringToBinaryW

advapi32

CryptImportKey
CryptHashData
CryptAcquireContextW
CryptVerifySignatureW
CryptSetKeyParam
CryptReleaseContext
CryptCreateHash
CryptDestroyKey
CryptDecrypt
CryptDestroyHash

kernel32

InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetLastError
FindFirstFileW
FindClose
FindNextFileW
ReadFile
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
GetCommandLineA
GetCurrentThreadId
MultiByteToWideChar
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
FlushFileBuffers
WriteFile
WideCharToMultiByte
GetConsoleCP
RtlUnwind
SetFilePointer
CloseHandle
InterlockedIncrement
InterlockedDecrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
GetModuleFileNameW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
Sleep
GetStringTypeW
HeapSize
RaiseException
SetStdHandle
WriteConsoleW
CreateFileW
LCMapStringW
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
SetEndOfFile

Exports

Exports

VAUTONVDA_getLicenseInfo
vplatform_GetInterfaces
vplatform_ReleaseInterfaces

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e738a96218f62c1bef615628850da59

Headers

DLL Characteristics

File Characteristics

Imports

crypt32

advapi32

kernel32

Exports

Exports

Sections

.text Size: 70KB - Virtual size: 70KB

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 5KB - Virtual size: 13KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 70KB - Virtual size: 70KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 5KB - Virtual size: 13KB

.reloc
Size: 16KB - Virtual size: 15KB