a
Static task
static1
Behavioral task
behavioral1
Sample
a5f48d7b16a1f23ab7a06978dd94d4c0_dll32_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a5f48d7b16a1f23ab7a06978dd94d4c0_dll32_JC.dll
Resource
win10v2004-20230915-en
General
-
Target
a5f48d7b16a1f23ab7a06978dd94d4c0_dll32_JC.dll
-
Size
2KB
-
MD5
a5f48d7b16a1f23ab7a06978dd94d4c0
-
SHA1
23f6fc1d1b25dad7833e1680ba857580b07a8502
-
SHA256
c45393f0fb19ebf586a71f50e2053fbaa573794b9ec8a50335795a8580ad8d8d
-
SHA512
7f6053f084975c2bcf97ae65ab95b6018b54766efeadd7882a9ad574f6c16b61b7e54bd6dbbbc509f24ee45c010c5e9240952e816dc0351796636d1a2997052a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5f48d7b16a1f23ab7a06978dd94d4c0_dll32_JC.dll
Files
-
a5f48d7b16a1f23ab7a06978dd94d4c0_dll32_JC.dll.dll windows:4 windows x86
4548755c892977d14657f32cf4a51525
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
exit
kernel32
CloseHandle
ReadFile
VirtualAlloc
CreateFileA
GetFileSize
shlwapi
SHDeleteKeyA
Exports
Exports
Sections
.text Size: 512B - Virtual size: 218B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 482B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ