Static task
static1
Behavioral task
behavioral1
Sample
Jkxgof.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Jkxgof.dll
Resource
win10v2004-20240221-en
General
-
Target
Jkxgof.dll
-
Size
520KB
-
MD5
15dcbe9356c187200ccc679f8c26bf94
-
SHA1
80777cac66c1a2a0e53f756b5d4d5b20af100b04
-
SHA256
45225ab5bdd77c365b92c109567fc727a45ab8e537e30b52227f8177d5ba933c
-
SHA512
a9d7ce6162126dafe8df9730c9d711afb3aa6c256012bd2b48b0ba9f01262c0771e24ba5828cdf66d8d3cd3160a857b284ec08e3d68e32ddfee1a1da2f1df694
-
SSDEEP
12288:TxHpKW1FQ37SNnd9Ltb7PWTZBWRfHDjJb5+mTucf:TxHpN637SL9LtvPWTAfjB5+mTucf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Jkxgof.dll
Files
-
Jkxgof.dll.dll windows:6 windows x86 arch:x86
266bc08ab36c63af2f707a1d6ad0bb63
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadConsoleW
WriteConsoleW
SetStdHandle
OutputDebugStringW
LoadLibraryExW
HeapReAlloc
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
CloseHandle
GetModuleFileNameW
WriteFile
GetOEMCP
GetACP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetModuleFileNameA
CreateFileW
HeapSize
GetModuleHandleExW
ExitProcess
GetProcessHeap
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetProcAddress
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
GetTickCount
EnumResourceTypesW
GetSystemDirectoryA
IsProcessorFeaturePresent
UnmapViewOfFile
LocalFree
GetUserDefaultLCID
EnumCalendarInfoW
SystemTimeToFileTime
GetFullPathNameW
GetDriveTypeW
SwitchToThread
DeleteCriticalSection
IsDebuggerPresent
GetSystemInfo
QueryDosDeviceW
RemoveDirectoryW
GetExitCodeThread
GetLocalTime
SetThreadLocale
FormatMessageW
InitializeCriticalSectionAndSpinCount
OpenProcess
ExpandEnvironmentStringsA
CreateDirectoryW
VerSetConditionMask
SetEndOfFile
MapViewOfFile
GetLocaleInfoA
FindFirstFileW
EnumSystemLocalesW
ResetEvent
GetCPInfoExW
FlushFileBuffers
GetTimeZoneInformation
GetCommandLineA
FreeLibrary
lstrcpyW
GetFileType
CreateNamedPipeA
MultiByteToWideChar
QueryPerformanceCounter
GetCPInfo
GetDateFormatW
GetStdHandle
SetLastError
SetUnhandledExceptionFilter
WideCharToMultiByte
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
GetLastError
HeapFree
GetCurrentThreadId
RaiseException
RtlUnwind
HeapAlloc
UnhandledExceptionFilter
user32
OffsetRect
CreateCaret
LoadCursorA
PostMessageW
SetWindowLongA
SetCapture
DrawIconEx
MessageBeep
ShowCursor
RegisterClassW
InsertMenuA
CheckMenuItem
SetCursor
SetTimer
CharLowerBuffW
WaitMessage
GetCapture
InvalidateRect
SetClassLongA
SetWindowsHookExA
IsWindow
FlashWindow
ScrollWindowEx
GetCaretBlinkTime
SetWindowTextW
ToUnicode
SetScrollInfo
CopyRect
IsRectEmpty
GetParent
AttachThreadInput
CreateIconIndirect
GetWindowTextW
GetSysColor
ReleaseCapture
SendDlgItemMessageA
GetWindowInfo
CreateMenu
GetWindowPlacement
MessageBoxA
SetDlgItemTextA
UnregisterClassA
gdi32
GetRgnBox
BitBlt
CreateBitmap
GetCharacterPlacementW
CreateFontIndirectW
CreateFontA
GetDeviceCaps
Ellipse
RealizePalette
RoundRect
GetDIBits
GetObjectW
GetTextExtentPointA
CreatePolygonRgn
TranslateCharsetInfo
MaskBlt
DeleteDC
GdiFlush
CreateRectRgn
GetCharABCWidthsFloatA
CreateDIBitmap
CreateEnhMetaFileW
LineTo
PatBlt
SetROP2
RectVisible
CloseEnhMetaFile
CopyEnhMetaFileA
advapi32
SetSecurityDescriptorOwner
OpenServiceW
RegCloseKey
RegEnumKeyExW
GetUserNameA
LookupPrivilegeValueW
SetSecurityDescriptorDacl
RegDeleteKeyA
CopySid
RegOpenKeyExA
OpenSCManagerW
RegLoadKeyW
RegDeleteValueA
ChangeServiceConfigW
oleaut32
SafeArrayPtrOfIndex
VariantCopy
Sections
.text Size: 400KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ