ce471967d4d7e7057ee220dde2ed5aa0_dll32_JC[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

ce471967d4d7e7057ee220dde2ed5aa0_dll32_JC.dll
Size

405KB
MD5

ce471967d4d7e7057ee220dde2ed5aa0
SHA1

f7803f8d818ba6125d5b15bff5c2b8f4fe90497c
SHA256

96cd05313193183a048dbd4375b257e5a26587c12ebf60c709b8d97f8eb3ae53
SHA512

f02e9ae45e5cb2b52d128cf347d7043f49d588cb25243c0b01a8cdfcbc89d94e5d20957eae04fd89ae4ddfd7fc09043b331ca065bef59e583e2b0251ea724e09
SSDEEP

6144:zUh/0oAAdqSd8xWmE8YcKNGkH1+x1fNpYk10OGzBV+UdvrEFp7hKt+S:zUh/9P8YcKNGkH1+ff8g0BjvrEH7DS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce471967d4d7e7057ee220dde2ed5aa0_dll32_JC.dll

Files

ce471967d4d7e7057ee220dde2ed5aa0_dll32_JC.dll
.dll windows:5 windows x86

d4f9f5d2184a3859754a6ac79402bf6f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

newdev

UpdateDriverForPlugAndPlayDevicesW

setupapi

SetupDiGetINFClassW
SetupDiCreateDeviceInfoW
SetupDiSetDeviceRegistryPropertyW
SetupDiCallClassInstaller
SetupCopyOEMInfW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiCreateDeviceInfoList

advapi32

RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegQueryValueW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyW
CloseServiceHandle
QueryServiceStatus
StartServiceW
OpenSCManagerW
OpenServiceW

mscms

InstallColorProfileW
AssociateColorProfileWithDeviceW

winspool.drv

ord203
ord204
AddPrinterW
XcvDataW
AddPrintProcessorW
AddPrinterDriverW
AddMonitorW
GetPrinterDriverDirectoryW
ClosePrinter
OpenPrinterW
EnumPrintersW
EnumPortsW
DocumentPropertiesW

kernel32

GlobalDeleteAtom
FileTimeToSystemTime
FileTimeToLocalFileTime
GlobalAddAtomW
GetCurrentProcessId
InterlockedDecrement
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
SetErrorMode
lstrlenA
InterlockedIncrement
CompareStringW
WritePrivateProfileStringW
GetModuleHandleA
GlobalFlags
GetVersionExA
LoadLibraryA
GetCurrentThread
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetFullPathNameW
HeapAlloc
HeapFree
GetFileAttributesA
GetConsoleCP
GetConsoleMode
ExitProcess
GetCommandLineA
HeapReAlloc
RtlUnwind
RaiseException
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
VirtualAlloc
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
InitializeCriticalSectionAndSpinCount
LCMapStringA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetProcessHeap
GetCurrentDirectoryA
GetDriveTypeA
SetEnvironmentVariableA
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
DeviceIoControl
WriteFile
ReadFile
CreateFileW
WinExec
CreateDirectoryW
WideCharToMultiByte
GetModuleFileNameW
SetCurrentDirectoryW
FindNextFileW
CopyFileW
GetVersionExW
FreeLibrary
LoadLibraryW
MultiByteToWideChar
GetCurrentProcess
GetModuleHandleW
GetProcAddress
GetWindowsDirectoryW
DeleteFileW
SetFileAttributesW
FindResourceW
LoadResource
LockResource
SizeofResource
GetPrivateProfileStringW
FindClose
FindFirstFileW
GetSystemDirectoryW
lstrlenW
lstrcatW
lstrcpyW
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
OutputDebugStringW
OutputDebugStringA
Sleep
GetTickCount
LocalHandle
LocalFree
LocalAlloc
GetLastError
GlobalFindAtomW

user32

DestroyMenu
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CallWindowProcW
CopyRect
GetMenu
SetWindowLongW
SetWindowPos
WinHelpW
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetWindowTextW
UnregisterClassW
UnhookWindowsHookEx
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
SendMessageW
ModifyMenuW
EnableMenuItem
ShowWindow
RegisterWindowMessageW
LoadIconW
DefWindowProcW
CheckMenuItem
PostMessageW
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
GetForegroundWindow
GetDlgItem
GetWindowLongW

gdi32

SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
SetMapMode
GetClipBox
DeleteObject
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
DeleteDC
GetStockObject
PtVisible
ScaleWindowExtEx
RectVisible
GetDeviceCaps
TextOutW

shell32

ShellExecuteW
SHGetSpecialFolderPathW

shlwapi

PathFindExtensionW
PathFindFileNameW
StrStrIW

oleaut32

VariantInit
VariantClear
VariantChangeType

Exports

Exports

?ShowUsbDlg@@YAHPBD0@Z
AutoInstallFaxNetworkDriver
AutoInstallFaxNetworkDriver64
AutoInstallNetworkDriver
AutoInstallNetworkDriver64
AutoInstallPSNetworkDriver
AutoInstallPSNetworkDriver64
CopyDriverFiletoTemp
CopyFiletoSystem
CopyFiletoSystem64
DeleteDriverFile
DeleteDriverFile64
DeleteInfFile
DeleteInfFile64
FindPrinters
GetDriverList
GetPrinterDriverList
Initialize
InstallFaxDriver32
InstallFaxDriver64
InstallGDIDriver32
InstallGDIDriver64
InstallPrinterDriver
InstallPrinterDriver64
InstallRemoteTcpIPPort
InstallRemoteTcpIPPort64
InstallTcpIPPort
InstallTcpIPPort64
InstallUSB
InstallUSB64
InstallUSBFAX
InstallUSBFAX64
InstallUSBGDI
InstallUSBGDI64
InstallUSBPrinter
InstallUSBPrinter64
InstallUSBScanner
InstallUSBScanner64
IsInstallFaxDriver
IsInstallGDIDriver
TCPPrintTestPage

Sections

.text
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4f9f5d2184a3859754a6ac79402bf6f

Headers

DLL Characteristics

File Characteristics

Imports

newdev

setupapi

advapi32

mscms

winspool.drv

kernel32

user32

gdi32

shell32

shlwapi

oleaut32

Exports

Exports

Sections

.text Size: 229KB - Virtual size: 229KB

.rdata Size: 43KB - Virtual size: 43KB

.data Size: 8KB - Virtual size: 122KB

.rsrc Size: 14KB - Virtual size: 14KB

.reloc Size: 33KB - Virtual size: 32KB

.text
Size: 229KB - Virtual size: 229KB

.rdata
Size: 43KB - Virtual size: 43KB

.data
Size: 8KB - Virtual size: 122KB

.rsrc
Size: 14KB - Virtual size: 14KB

.reloc
Size: 33KB - Virtual size: 32KB