7f35d97d757715a428ece1373d6b17ec

Sharing

Copy URL Twitter E-mail

General

Target

7f35d97d757715a428ece1373d6b17ec
Size

209KB
MD5

7f35d97d757715a428ece1373d6b17ec
SHA1

bb5d74f1e604d3cd1a7dc6623d41746c44f2f5b1
SHA256

5ae3cf5be68d374eaeafde90cea42ca8684519279630d3933abd27d6c8fa1790
SHA512

0cd5f0dbedcb00015e24941a708ab2838592bedd9851c12c7d60f55b657cd71feb596f659ddf212048a0d8c97933de964ad86d1e0b8ca2889009466456e0e320
SSDEEP

6144:CUnj/AX2L4WdkKPXBx+ozmXTT4D8T3B2a/bDi:CUnj/AYLnmXTTo8Tx2aPi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f35d97d757715a428ece1373d6b17ec

Files

7f35d97d757715a428ece1373d6b17ec
.dll windows:1 windows x86 arch:x86

c3adcee3de54114b46157fd4673f01cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

jgdw400

_JgGetMask@8
_JgLosslessDecompressCreate@4
_JgLosslessDecompressQuery@12
_JgGetImageInfo@12
_JgDecompressImageBlock@16
_JgGetImage@8
_JgLosslessDecompressReset@4
_JgGetDecompressInfo@8
_JgCreateDecompressContext@8
_JgCreateDecompressor@12
_JgDestroyDecompressor@4
_JgDestroyDecompressContext@4
_JgLosslessDecompressPartitionReset@4
_JgLosslessDecompressBlock@24
_JgLosslessDecompressDestroy@4

jgaw400

JgAOpen
JgAHeartbeat
JgAGetVolume
JgAInputSegment
JgAClose
JgAGetDevice
JgAShutDown
JgAReleaseDevice
JgAStartPlay
JgADoTest
JgAStatus
JgASetEOFMark
JgAStartUp
JgATerminatePlay
JgASetVolume
JgAGetReport
JgASetPlayParameters

jgmd400

JgMDOpen
JgMDStartPlay
JgMDReleaseDevice
JgMDSetPlayParameters
JgMDGetDevice
JgMDTerminatePlay
JgMDSetEOFMark
JgMDInputSegment
JgMDHeartbeat
JgMDGetReport
JgMDSetVolume
JgMDShutDown
JgMDStartUp
JgMDStatus
JgMDGetVolume
JgMDClose

jgsh400

JgSSetTimePosition
JgSGetMask
JgSGetImage
JgSOpen
JgSInputStream
JgSGetReport
JgSGetPerformance
JgSGetTimePosition
JgSSound
JgSResumeShow
JgSPauseShow
JgSStopShow
JgSStartShow
JgSClose
JgSGetStreamInfo

kernel32

GetCurrentProcess
GlobalHandle
GetCurrentThread
GlobalFree
GetCPInfo
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
GetLastError
GetACP
GetModuleFileNameA
VirtualAlloc
VirtualFree
ExitProcess
GetVersion
GetEnvironmentStrings
GetCommandLineA
GlobalAlloc
GlobalReAlloc
GlobalUnlock
GetOEMCP
GlobalLock

Exports

Exports

JgpAlloc
JgpClose
JgpDoTest
JgpFree
JgpGetARTNote
JgpGetImage
JgpGetMask
JgpGetPalette
JgpGetPerformance
JgpGetPosition
JgpGetReport
JgpGetUiHook
JgpGetUiInputHook
JgpGetUiLong
JgpGetUiReportHook
JgpHeartBeat
JgpInputStream
JgpLosslessBlock
JgpLosslessCreate
JgpLosslessDestroy
JgpLosslessPartitionReset
JgpLosslessQuery
JgpLosslessReset
JgpOpen
JgpPausePlay
JgpQueryStream
JgpReAlloc
JgpReleaseSound
JgpResumePlay
JgpResumeSound
JgpSetEOFMark
JgpSetPosition
JgpSetUiHook
JgpSetUiInputHook
JgpSetUiLong
JgpSetUiReportHook
JgpShutDown
JgpStartPlay
JgpStartUp
JgpStopPlay

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3adcee3de54114b46157fd4673f01cb

Headers

File Characteristics

Imports

jgdw400

jgaw400

jgmd400

jgsh400

kernel32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 32KB

.bss Size: - Virtual size: 1KB

.rdata Size: 512B - Virtual size: 17B

.data Size: 2KB - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 2KB

.edata Size: 169KB - Virtual size: 168KB

.rsrc Size: 1024B - Virtual size: 808B

.reloc Size: 1024B - Virtual size: 942B

.text
Size: 32KB - Virtual size: 32KB

.bss
Size: - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 17B

.data
Size: 2KB - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 2KB

.edata
Size: 169KB - Virtual size: 168KB

.rsrc
Size: 1024B - Virtual size: 808B

.reloc
Size: 1024B - Virtual size: 942B