8bd68b08c120cbb0e0ee79fbb33544f0_dll64_JC[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

8bd68b08c120cbb0e0ee79fbb33544f0_dll64_JC.dll
Size

80KB
MD5

8bd68b08c120cbb0e0ee79fbb33544f0
SHA1

802feddb0319d6adbce76587c4b4d97c0b6f9825
SHA256

f213b01384830757b6d1f510a1bb5961b7a2202c933c1a8bf7ba6d86d401c744
SHA512

0d7b4f93e302d7febe77b9c0497884f61ce0974cbd111d517b6898138ae042e9573b8bc982099232f0be82fadad3faf17b8100e0f9f7b2dfccd9c790acdce1ac
SSDEEP

1536:yuA9uTjGKcCO9esIXq9eFHUAf9HeIMTWmg9Ppki6EPAyVF:yuAmCKcCO9caMFHt1BWg9RkkBz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bd68b08c120cbb0e0ee79fbb33544f0_dll64_JC.dll

Files

8bd68b08c120cbb0e0ee79fbb33544f0_dll64_JC.dll
.dll windows:6 windows x64

b9d2f9b5216980205e47da8db88ef4d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

unrealserver-core-win64-shipping

?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
??1FString@@QEAA@XZ
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
??0FString@@QEAA@XZ
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPath@Private@CoreUObject@UE@@EA
?Free@FMemory@@SAXPEAX@Z
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?CheckVerifyFailedImpl@FDebug@@SAXPEBD0HPEAXPEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
??4FString@@QEAAAEAV0@AEBV0@@Z

unrealserver-coreuobject-win64-shipping

?GetStaticStruct@@YAPEAVUScriptStruct@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
??0ICppStructOps@UScriptStruct@@QEAA@HH@Z
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?ConstructUScriptStruct@UECodeGen_Private@@YAXAEAPEAVUScriptStruct@@AEBUFStructParams@1@@Z
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z
?Z_Construct_UScriptStruct_FGuid@@YAPEAVUScriptStruct@@XZ
?HasGetTypeHash@ICppStructOps@UScriptStruct@@QEBA_NXZ
??1ICppStructOps@UScriptStruct@@UEAA@XZ
?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
memcpy
memset

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_cexit
_initterm
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initialize_onexit_table
_initialize_narrow_environment

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent

Exports

Exports

??$StaticStruct@UFSessionServiceLog@@@@YAPEAVUScriptStruct@@XZ
??$StaticStruct@UFSessionServiceLogSubscribe@@@@YAPEAVUScriptStruct@@XZ
??$StaticStruct@UFSessionServiceLogUnsubscribe@@@@YAPEAVUScriptStruct@@XZ
??$StaticStruct@UFSessionServicePing@@@@YAPEAVUScriptStruct@@XZ
??$StaticStruct@UFSessionServicePong@@@@YAPEAVUScriptStruct@@XZ
?StaticStruct@FSessionServiceLog@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FSessionServiceLogSubscribe@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FSessionServiceLogUnsubscribe@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FSessionServicePing@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FSessionServicePong@@SAPEAVUScriptStruct@@XZ
?Z_Construct_UScriptStruct_FSessionServiceLog@@YAPEAVUScriptStruct@@XZ
?Z_Construct_UScriptStruct_FSessionServiceLogSubscribe@@YAPEAVUScriptStruct@@XZ
?Z_Construct_UScriptStruct_FSessionServiceLogUnsubscribe@@YAPEAVUScriptStruct@@XZ
?Z_Construct_UScriptStruct_FSessionServicePing@@YAPEAVUScriptStruct@@XZ
?Z_Construct_UScriptStruct_FSessionServicePong@@YAPEAVUScriptStruct@@XZ
InitializeModule

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uedbg
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9d2f9b5216980205e47da8db88ef4d2

Headers

DLL Characteristics

File Characteristics

Imports

unrealserver-core-win64-shipping

unrealserver-coreuobject-win64-shipping

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.uedbg Size: 1024B - Virtual size: 692B

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 1KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 59KB - Virtual size: 59KB

.reloc Size: 512B - Virtual size: 412B

.text
Size: 6KB - Virtual size: 5KB

.uedbg
Size: 1024B - Virtual size: 692B

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 1KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 59KB - Virtual size: 59KB

.reloc
Size: 512B - Virtual size: 412B