b54ffa33608254517f491164a556e700_dll32_JC[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

b54ffa33608254517f491164a556e700_dll32_JC.dll
Size

324KB
MD5

b54ffa33608254517f491164a556e700
SHA1

12654d1c10711fa555d6eb86152217a57fe560d8
SHA256

e23b5332852d1cf5ad50ec122c49c3094cfdfe97d3af6d6cfc5e7926846b9c87
SHA512

1b4e1ee350fc2ab365f33872913c64c1c12c493c38d9c06388d6e24989b0dc490c5efa1d6947831e7c11739ed163a021bc2f1eba17492b47c2d0b827404a36de
SSDEEP

6144:jfbEB/79zExWe3OUMoW678vQ546qMT3PNX4T189scp9GMnWg:vEBp8fOUui8vtTMrPGEsc2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b54ffa33608254517f491164a556e700_dll32_JC.dll

Files

b54ffa33608254517f491164a556e700_dll32_JC.dll
.dll windows:6 windows x86

a54e2180093e4b5d643a442c8cfea6fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_isatty
_write
_lseeki64
_fileno
__pioinfo
__badioinfo
wctomb
_itoa
_snprintf
isleadbyte
_ismbblead
_amsg_exit
_initterm
free
malloc
_XcptFilter
_iob
_errno
tolower
isspace
getenv
atoi
_stricmp
_strnicmp
strstr
memcpy
memset
strchr
strncmp
_strcmpi

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
WaitForSingleObject
TerminateProcess
GetCurrentProcess
DuplicateHandle
GetPriorityClass
CreateProcessA
CreateThread
SetFilePointer
GetCurrentProcessId
CreateNamedPipeA
CreateFileA
CreateEventA
ReadFile
WriteFile
WaitForMultipleObjects
GetOverlappedResult
CloseHandle
GetCurrentDirectoryA
MultiByteToWideChar
WideCharToMultiByte
LocalFree
LocalReAlloc
LocalAlloc
RemoveDirectoryA
GetFileAttributesA
CreateDirectoryA
GetLastError
OutputDebugStringA
DebugBreak
SetEnvironmentVariableA
SetLastError
SetCurrentDirectoryA
GetEnvironmentVariableA
DeleteFileA
CopyFileA
GetPrivateProfileSectionA
GetModuleFileNameA

advapi32

RegCreateKeyA
RegSetValueA
RegCloseKey
RegQueryValueA

Exports

Exports

SrcSrvCleanup
SrcSrvEnumTokens
SrcSrvExecToken
SrcSrvExecTokenA
SrcSrvExecTokenW
SrcSrvGetFile
SrcSrvGetFileA
SrcSrvGetFileW
SrcSrvGetOptions
SrcSrvGetToken
SrcSrvGetTokenA
SrcSrvGetTokenW
SrcSrvInit
SrcSrvInitA
SrcSrvInitW
SrcSrvIsModuleLoaded
SrcSrvLoadModule
SrcSrvLoadModuleA
SrcSrvLoadModuleW
SrcSrvRegisterCallback
SrcSrvResolveTokenVar
SrcSrvResolveTokenVarA
SrcSrvResolveTokenVarW
SrcSrvSetOptions
SrcSrvSetParentWindow
SrcSrvSetTargetPath
SrcSrvSetTargetPathA
SrcSrvSetTargetPathW
SrcSrvUnloadModule

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 243KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a54e2180093e4b5d643a442c8cfea6fd

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

advapi32

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 42KB

.data Size: 30KB - Virtual size: 173KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 243KB - Virtual size: 244KB

.text
Size: 43KB - Virtual size: 42KB

.data
Size: 30KB - Virtual size: 173KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 243KB - Virtual size: 244KB