JpMapControl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JpMapControl.dll
Resource
win10v2004-20240426-en
General
-
Target
JpMapControl.dll
-
Size
562KB
-
MD5
4cd15f1a9d9b368687b08bae7e2f95ce
-
SHA1
13a18f2506c5dab7942296f23f34495556373bc3
-
SHA256
6eef695d3a88dde1244f1b3f3c4dd9bf896c10430a7099946d1a1b83c2d8e0b2
-
SHA512
4afde5355b431efdb52a568ba187bb01e9f61460bbb20535efc7fae2911371b37124bd3762f2aa956d04bdf95855fc63343e0655a2e535a279d428a31e8d1301
-
SSDEEP
12288:mOnH8DUXCXL0VWYYiqZHJ7QqZprw6Owhc4u0LDelYh7rZr:dH8DUXU0VWYYis/ww2eeWtr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JpMapControl.dll
Files
-
JpMapControl.dll.dll windows:10 windows x86 arch:x86
97630462a19dd961d405d65c936f6bb3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
api-ms-win-crt-private-l1-1-0
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
memmove
_o_ceil
_o_free
_o_malloc
_o_realloc
_o_terminate
__current_exception
__current_exception_context
_except_handler4_common
_CxxThrowException
_o__execute_onexit_table
_o__errno
_o__dclass
_o__crt_atexit
_o__configure_narrow_argv
_o__CIfmod
_o___stdio_common_vswprintf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o__cexit
_o__callnewh
_o__fdclass
__std_terminate
__CxxFrameHandler3
memcpy
api-ms-win-crt-string-l1-1-0
memset
api-ms-win-core-winrt-error-l1-1-0
SetRestrictedErrorInfo
RoOriginateErrorW
RoTransformError
RoOriginateError
GetRestrictedErrorInfo
api-ms-win-core-synch-l1-1-0
InitializeCriticalSection
DeleteCriticalSection
ReleaseSRWLockShared
InitializeCriticalSectionEx
CreateEventW
AcquireSRWLockExclusive
AcquireSRWLockShared
ReleaseMutex
SetEvent
ReleaseSemaphore
ReleaseSRWLockExclusive
LeaveCriticalSection
EnterCriticalSection
InitializeSRWLock
CreateSemaphoreExW
CreateMutexExW
WaitForSingleObject
OpenSemaphoreW
WaitForSingleObjectEx
api-ms-win-core-winrt-string-l1-1-0
WindowsCreateStringReference
WindowsDeleteString
WindowsCreateString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsDuplicateString
api-ms-win-core-util-l1-1-0
EncodePointer
DecodePointer
api-ms-win-eventing-provider-l1-1-0
EventWriteTransfer
EventSetInformation
EventUnregister
EventRegister
api-ms-win-core-debug-l1-1-0
DebugBreak
IsDebuggerPresent
OutputDebugStringW
api-ms-win-core-libraryloader-l1-2-0
GetModuleHandleExW
LoadLibraryExW
GetProcAddress
GetModuleHandleW
DisableThreadLibraryCalls
LoadLibraryExA
FreeLibrary
GetModuleFileNameA
api-ms-win-core-synch-l1-2-0
InitOnceExecuteOnce
WakeByAddressSingle
WaitOnAddress
api-ms-win-core-com-l1-1-0
CoCreateFreeThreadedMarshaler
CoReleaseMarshalData
CoTaskMemAlloc
CoMarshalInterface
CreateStreamOnHGlobal
CoCreateGuid
CoCreateInstance
api-ms-win-core-errorhandling-l1-1-0
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
SetLastError
RaiseException
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-processthreads-l1-1-0
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
OpenProcessToken
api-ms-win-core-localization-l1-2-0
FormatMessageW
api-ms-win-core-heap-l1-1-0
HeapAlloc
GetProcessHeap
HeapFree
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
OpenProcess
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetSystemInfo
GetSystemDirectoryW
GetSystemTimeAsFileTime
api-ms-win-core-interlocked-l1-1-0
InitializeSListHead
moshostclient
MapsPackageClose
MapsPackageFree
MapsPackageGetPackages
MapsPackageAddMapPackageAsync
MapsPackageOpen
MapsPackageFindNearbyPackagesAsync
ztrace_maps
ZTraceReportPropagationNoThis
ZTraceHelper
ZTraceReportOriginationNoThis
ZTraceClose
ZTraceReportPropagation
ZTraceReportIgnore
ZTraceReportOrigination
ZTraceInit
ZTraceHelperNoThis
mapconfiguration
ConfigurationManager_Create
mapgeocoder
CreateMapGeocoderFactory
maprouter
??0GeoCoordinates@ngeo@Microsoft@@QAE@NNM@Z
MapRouter_DetachGuidanceStatusChangedListener
??1GeoCoordinates@ngeo@Microsoft@@UAE@XZ
?is_valid@GeoCoordinates@ngeo@Microsoft@@UBE_NXZ
?get_altitude@GeoCoordinates@ngeo@Microsoft@@UBEMXZ
?get_longitude@GeoCoordinates@ngeo@Microsoft@@UBENXZ
?get_latitude@GeoCoordinates@ngeo@Microsoft@@UBENXZ
MapRouter_AttatchGuidanceStatusChangedListener
msvcp_win
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z
?uncaught_exception@std@@YA_NXZ
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
api-ms-win-crt-math-l1-1-0
_isnan
bcp47langs
GetUserLanguages
ext-ms-win-rtcore-ntuser-sysparams-l1-1-0
MonitorFromRect
GetMonitorInfoW
ext-ms-win-rtcore-ntuser-window-ext-l1-1-0
AllowSetForegroundWindow
api-ms-win-core-url-l1-1-0
UrlEscapeW
api-ms-win-core-winrt-error-l1-1-1
RoGetMatchingRestrictedErrorInfo
IsErrorPropagationEnabled
RoReportFailedDelegate
api-ms-win-core-winrt-l1-1-0
RoInitialize
RoUninitialize
RoActivateInstance
RoGetActivationFactory
api-ms-win-security-base-l1-1-0
GetTokenInformation
api-ms-win-core-com-l1-1-1
RoGetAgileReference
rpcrt4
UuidCreate
api-ms-win-core-path-l1-1-0
PathCchAppend
api-ms-win-core-file-l1-1-0
GetFileAttributesW
api-ms-win-core-registry-l1-1-0
RegGetValueW
api-ms-win-core-threadpool-legacy-l1-1-0
QueueUserWorkItem
dcomp
DCompositionCreateDevice3
ntdll
RtlIsMultiSessionSku
RtlSubscribeWnfStateChangeNotification
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlGetDeviceFamilyInfoEnum
shcore
ord265
mapcontrolcore
?GetBoundingBox@RouteLeg@core@@UBEJPAVGeoRect@2@@Z
??1GeoRect@core@@UAE@XZ
??0GeoRect@core@@QAE@XZ
??1RouteLeg@core@@UAE@XZ
??0RouteLeg@core@@QAE@XZ
?GetTargetRoadName@RouteManeuver@core@@QBEJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?GetFreewayExitNumber@RouteManeuver@core@@QBEJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?GetTrafficCircleExitNumber@RouteManeuver@core@@QBEKXZ
?GetManeuverType@RouteManeuver@core@@QBE?AW4RouteManeuverType@2@XZ
?GetInstructionText@RouteManeuver@core@@QBEJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?GetDistanceInMetersToNextManeuver@RouteManeuver@core@@QBEKXZ
?GetStartCoordinates@RouteManeuver@core@@QBEJPAVGeoCoordinates@2@@Z
??1GeoCoordinates@core@@UAE@XZ
??0GeoCoordinates@core@@QAE@XZ
?GetManeuverNotice@RouteManeuver@core@@QBEJPAH@Z
?GetManeuverWarnings@RouteManeuver@core@@QBEABVIItineraryWarning@msnma@@K@Z
?GetManeuverWarningCount@RouteManeuver@core@@QBEKXZ
??1RouteManeuver@core@@UAE@XZ
??0RouteManeuver@core@@QAE@XZ
?GetDurationInSeconds@RouteLeg@core@@UBEKXZ
?GetManeuverCount@RouteLeg@core@@UBEKXZ
?GetManeuver@RouteLeg@core@@UBEJKPAVRouteManeuver@2@@Z
?GetTrafficCongestion@RouteLeg@core@@UBE?AW4TrafficCongestionType@IRoute@msnma@@XZ
?GetDurationWithoutTrafficInSeconds@RouteLeg@core@@UBEKXZ
??0Route@core@@QAE@XZ
??1Route@core@@UAE@XZ
?GetBoundingBox@Route@core@@UBEJPAVGeoRect@2@@Z
?GetLengthInMeters@Route@core@@UBEKXZ
?GetDurationInSeconds@Route@core@@UBEKXZ
?GetGeometryCoordinatesCount@Route@core@@UBEKXZ
?GetGeometryCoordinates@Route@core@@UBEJKPAVGeoCoordinates@2@@Z
?GetLegCount@Route@core@@UBEKXZ
?GetLeg@Route@core@@UBEJKPAVRouteLeg@2@@Z
?GetTrafficCongestion@Route@core@@UBE?AW4TrafficCongestionType@IRoute@msnma@@XZ
?GetDurationWithoutTrafficInSeconds@Route@core@@UBEKXZ
?Initialize@Route@core@@QAEJV?$shared_ptr@VIRoute@msnma@@@std@@@Z
?GetGeometryCoordinatesCount@RouteLeg@core@@UBEKXZ
?GetGeometryCoordinates@RouteLeg@core@@UBEJKPAVGeoCoordinates@2@@Z
?GetBackingObject@?$BackedType@V?$shared_ptr@VIManeuver@msnma@@@std@@@core@@QBE?AV?$shared_ptr@VIManeuver@msnma@@@std@@XZ
?GetBackingObject@?$BackedType@V?$shared_ptr@VIRoute@msnma@@@std@@@core@@QBE?AV?$shared_ptr@VIRoute@msnma@@@std@@XZ
?GetLimitNetworkUsage@MapsSettings@@SGJPA_N@Z
?GetBingAuthenticationKey@MapsSettings@@SGJPAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?RestrictedAPIAccessCheck@ApiAccessCheck@@SGJXZ
?GetLatitude@GeoCoordinates@core@@UBENXZ
?GetUserGeoRegionAsThreeLetterCode@MapsSettings@@SGJPAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?GetDataAttribution@MapsSettings@@SGJPAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?SetLimitNetworkUsage@MapsSettings@@SGJ_N@Z
?GetTopLeft@GeoRect@core@@QBEJPAVGeoCoordinates@2@@Z
?GetBottomRight@GeoRect@core@@QBEJPAVGeoCoordinates@2@@Z
?SetLatitude@GeoCoordinates@core@@UAEXN@Z
?SetLongitude@GeoCoordinates@core@@UAEXN@Z
?IsValid@GeoCoordinates@core@@UBE_NXZ
?c_DefaultDrivingRouteOptions@RouterAdapterCore@@2URouteOptions@engine@@B
?c_DefaultWalkingRouteOptions@RouterAdapterCore@@2URouteOptions@engine@@B
?CalculateRoute@RouterAdapterCore@@QAEJ$$QAV?$vector@URoutePoint@engine@@V?$allocator@URoutePoint@engine@@@std@@@std@@W4TravelMode@engine@@W4RouteOptimization@5@KIJPAURouteOptions@5@@Z
?Cancel@RouterAdapterCore@@QAEXXZ
?GetErrorCode@OperationAdapterCore@@QBEJXZ
?GetViolatedOptions@RouterAdapterCore@@QAEJPAH@Z
?GetRoute@RouterAdapterCore@@QAEJPAVRoute@core@@@Z
?GetAlternateRouteCount@RouterAdapterCore@@QAEJPAI@Z
?GetAlternateRouteViolatedOption@RouterAdapterCore@@QAEJIPAH@Z
?GetAlternateRoute@RouterAdapterCore@@QAEJIPAVRoute@core@@@Z
?GetConnectivityType@RouterAdapterCore@@QAEJPAW4ConnectivityType@engine@@@Z
?GetProvider@RouterAdapterCore@@QAEJPAW4Provider@engine@@@Z
??0RouterAdapterCore@@IAE@XZ
??1RouterAdapterCore@@MAE@XZ
?SetProgress@QueryAdapterCore@@MAEXK@Z
?GetResultSqmId@RouterAdapterCore@@UBEKXZ
?OnRouteProgress@RouterAdapterCore@@UAEXK@Z
?OnRouteDone@RouterAdapterCore@@UAEXABURouteResult@engine@@@Z
?Post@?$UIThreadCore@UIRouterUI@@@@UAEXPAV?$TDispatchItem@UIRouterUI@@@@@Z
?GetGenerationNumber@?$UIThreadCore@UIRouterUI@@@@UBEJXZ
?GetUserProfileLanguages@MapsSettings@@SGJPAPAUHSTRING__@@@Z
?GetUserGeoRegion@MapsSettings@@SGJPAPAUHSTRING__@@@Z
IsUIThread
?_CoreUninitialize@RouterAdapterCore@@IAEXXZ
?_CoreInitialize@RouterAdapterCore@@IAEJHV?$unique_ptr@UIThreadSignal@@U?$destroy_delete@UIThreadSignal@@@@@std@@@Z
?GetInstanceId@OperationAdapterCore@@QBEHXZ
?ProcessDispatchQueue@?$UIThreadCore@UIRouterUI@@@@QAEXPAUIRouterUI@@@Z
?GetLocaleMapConfiguration@MapsSettings@@SGJPAPAUILocaleMapConfiguration@@@Z
?GetDefaultCenterFromTimezone@MapsSettings@@SGPBVGeoCoordinates@core@@XZ
?GetBingMapsKey@MapsSettings@@SGJPAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?SetBingMapsKey@MapsSettings@@SGJABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?IsChinaVariant@MapsSettings@@SG_NXZ
?IsWatermarkEnabled@MapsSettings@@SG_NXZ
?GetKeyValidationStatus@MapsSettings@@SGJPAH@Z
?SetBingAuthenticationKey@MapsSettings@@SGJABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?SetKeyValidationStatus@MapsSettings@@SGJH@Z
?RegisterListener@SuspendResumeDispatcher@@SGJPAVISuspendResumeListener@@PA_N@Z
?IsOldChinaRegKeySet@MapsSettings@@SG_NXZ
?GetLengthInMeters@RouteLeg@core@@UBEKXZ
?UnregisterListener@SuspendResumeDispatcher@@SGXPAVISuspendResumeListener@@@Z
?GetLongitude@GeoCoordinates@core@@UBENXZ
api-ms-win-core-apiquery-l1-1-0
ApiSetQueryApiSetPresence
api-ms-win-core-memory-l1-1-0
VirtualQuery
VirtualProtect
Exports
Exports
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
JpIs3DSupported
JpIsUnifiedMapsStack
JpMapControlSettings_Create
JpMapControl_Create
JpMapFactory_Create
JpMapModel3DFrom3MFStreamOperation_Create
JpMapOverlayModel_Create
JpMapStyleSheetFactory_Create
JpOverviewMapControl_Create
JpRestrictedApiAccessCheck
JpStreetsideExperience_Create
JpStreetsidePanoramaOperation_Create
MapSettings_GetMosBingMapsKey
MapSettings_ResetMosKeys
Sections
.text Size: 457KB - Virtual size: 457KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didat Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ