KiInstall
KiUnInstall
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
f132204e47016d2ddf545a32209195f0_dll32_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f132204e47016d2ddf545a32209195f0_dll32_JC.dll
Resource
win10v2004-20230915-en
Target
f132204e47016d2ddf545a32209195f0_dll32_JC.dll
Size
284KB
MD5
f132204e47016d2ddf545a32209195f0
SHA1
01c50a860526e2026eb32a346dfb4f8d0b215852
SHA256
7667ed8ec98a9101f45b3d9b9755a31a0ab6a1004cffcac304d07fd19ac79964
SHA512
837995276cba3b70ddad1c805fa61adfab52ba039db891afa0386b591b32d3dc9db136df66522e27f8c7544964b0abba0559c7cb63832126e444f65f61cc7e80
SSDEEP
6144:hoJFeHDBirldHGFCCM5fZ/NzK3hl1znDgArlLmR:uJFekCMrZOhfXrlLmR
Checks for missing Authenticode signature.
resource |
---|
f132204e47016d2ddf545a32209195f0_dll32_JC.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitThread
CreateThread
HeapFree
HeapAlloc
GetCommandLineA
GetProcessHeap
RtlUnwind
RaiseException
ExitProcess
HeapSize
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetStdHandle
LCMapStringA
LCMapStringW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetThreadContext
SetThreadContext
FlushInstructionCache
InterlockedCompareExchange
VirtualQuery
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
GlobalFindAtomW
GetVersionExA
GetModuleHandleA
GlobalFlags
WritePrivateProfileStringW
InterlockedIncrement
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalAddAtomW
SuspendThread
ResumeThread
GetCurrentThreadId
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
WideCharToMultiByte
InterlockedExchange
lstrcmpW
GlobalDeleteAtom
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
FreeLibrary
FindResourceW
LoadResource
LockResource
SizeofResource
SetLastError
MultiByteToWideChar
lstrlenA
LocalFree
InterlockedDecrement
GetModuleFileNameA
GetTickCount
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetSystemTime
lstrlenW
SetEvent
WaitForSingleObject
CreateEventW
OpenEventW
OutputDebugStringW
GetSystemDirectoryW
GetLastError
Sleep
GetCurrentThread
VirtualProtect
GetModuleHandleW
WriteProcessMemory
VirtualProtectEx
LoadLibraryA
GetCurrentProcessId
OpenProcess
GetProcAddress
LoadLibraryW
CloseHandle
GetCurrentProcess
GetModuleFileNameW
RegisterWindowMessageW
LoadIconW
WinHelpW
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CopyRect
DefWindowProcW
CallNextHookEx
SetWindowsHookExW
UnregisterClassA
ShowWindow
GetCapture
SetCapture
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
SetWindowTextW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
DestroyMenu
GetClassInfoExW
GetClassNameW
IsWindow
GetWindowLongW
GetWindowTextW
SendMessageW
UnhookWindowsHookEx
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
PostQuitMessage
PostMessageW
CheckMenuItem
EnableMenuItem
ModifyMenuW
GetParent
GetSysColorBrush
UnregisterClassW
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
SetCursor
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
TextOutW
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
SetMapMode
RectVisible
PtVisible
GetClipBox
ExtTextOutW
GetDeviceCaps
CreateBitmap
DeleteObject
SaveDC
RestoreDC
SetBkColor
SetTextColor
Escape
OpenPrinterW
ClosePrinter
DocumentPropertiesW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
RegQueryValueExA
RegOpenKeyExA
DeleteService
ControlService
OpenServiceA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
CreateServiceA
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegisterServiceCtrlHandlerW
CreateProcessAsUserW
SetServiceStatus
LookupPrivilegeValueW
PathFindExtensionW
PathRemoveFileSpecW
PathFindFileNameW
OleRun
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoInitialize
SysFreeString
VariantInit
VariantClear
SysAllocString
VariantChangeType
GetErrorInfo
WTSFreeMemory
WTSEnumerateSessionsW
WTSQueryUserToken
DestroyEnvironmentBlock
CreateEnvironmentBlock
GetAdaptersInfo
WSACleanup
inet_ntoa
gethostname
gethostbyname
WSAStartup
KiInstall
KiUnInstall
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ