i4jinst[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

i4jinst.dll
Size

209KB
MD5

6613ccb93ce4eb0ab7671d1ca91b95af
SHA1

dc5719a51d3a662f04f735cab6c7aa918222707b
SHA256

d4eb9a4ee389f03c402e553724015af8d5b85835828bd66b1b45131b6837802f
SHA512

eb78d15af9e4e05d78c3f9a97fe4e53f6448d94d8676845864d518f4cee48f1eb90399243bdb16c3f19c3571a9c0e32737d50cf2ecaa5977dc1f6d481b82b37d
SSDEEP

3072:FqwQoxmmfYC5Bs52cSe1uUQQwSsa8oDPjaFrdLqw1e6lB0b3IYpE+QIjZL9gn:FqwQUmmY2Bs5irEpDPGvG8x+R99gn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
i4jinst.dll

Files

i4jinst.dll
.dll windows:5 windows x64 arch:x64

3c18a09385bc06edaad7444c7412e148

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

advapi32

SetNamedSecurityInfoW
SetEntriesInAclW
GetNamedSecurityInfoW
FreeSid
AllocateAndInitializeSid
LookupAccountNameW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
QueryServiceConfigW
ControlService
StartServiceW
DeleteService
CreateServiceW
ChangeServiceConfig2W
ChangeServiceConfigW
LookupAccountSidW
RegCreateKeyExW
RegSaveKeyW
RegRestoreKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegEnumValueW
RegGetValueA

ole32

CoUninitialize
ReleaseStgMedium
CoTaskMemFree
CoCreateInstance
CoInitialize
CoInitializeEx

oleaut32

SafeArrayAccessData
SafeArrayUnaccessData

user32

DestroyIcon
FlashWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoA
GetSystemMenu
GetWindowLongA
IsZoomed
SetMenuDefaultItem
TrackPopupMenu
PostMessageA
CallWindowProcA
SetWindowLongPtrA
SetMenuItemInfoA
GetClientRect
FillRect
IsIconic
CreateIconFromResourceEx
SetWindowPos
RegisterClipboardFormatW
FindWindowW
GetWindowLongPtrW
GetClassNameW
GetWindow
GetWindowTextW
GetLastActivePopup
SendMessageTimeoutW
GetWindowPlacement
ShowWindow
SetForegroundWindow
EnumWindows
IsWindowVisible
GetWindowThreadProcessId
PostMessageW
ExitWindowsEx
wsprintfW
LookupIconIdFromDirectoryEx
GetDesktopWindow
LoadIconW

kernel32

CreateFileA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
SetStdHandle
SetFilePointer
MultiByteToWideChar
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
HeapDestroy
HeapCreate
HeapSetInformation
FlsAlloc
FlsFree
FlsGetValue
DecodePointer
EncodePointer
ExitProcess
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
DeleteCriticalSection
LocalFree
LocalAlloc
GetProcAddress
GetModuleHandleW
LoadLibraryA
LoadLibraryExW
LoadLibraryW
GetWindowsDirectoryW
GetSystemDirectoryW
GetDriveTypeW
GetShortPathNameW
GetModuleHandleA
CloseHandle
GetCurrentProcess
GetCurrentProcessId
GetLastError
WaitForMultipleObjects
TerminateProcess
OpenProcess
GetProcessId
GlobalMemoryStatus
FreeLibrary
GetDiskFreeSpaceExW
CreateProcessW
GetModuleHandleExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
Sleep
SetConsoleTitleW
GetTickCount
GetConsoleTitleW
GlobalUnlock
GlobalLock
CreateNamedPipeW
ConnectNamedPipe
CreateFileW
WaitNamedPipeW
DisconnectNamedPipe
ReadFile
FlushFileBuffers
WriteFile
GetExitCodeProcess
GlobalFree
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
FormatMessageW
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
RtlPcToFileHeader
RtlUnwindEx
HeapFree
HeapReAlloc
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode

Exports

Exports

Java_com_install4j_runtime_flatlaf_FlatWindowsNativeWindowBorder_00024WndProc_installImpl
Java_com_install4j_runtime_flatlaf_FlatWindowsNativeWindowBorder_00024WndProc_setWindowBackground
Java_com_install4j_runtime_flatlaf_FlatWindowsNativeWindowBorder_00024WndProc_showWindow
Java_com_install4j_runtime_flatlaf_FlatWindowsNativeWindowBorder_00024WndProc_uninstallImpl
Java_com_install4j_runtime_flatlaf_FlatWindowsNativeWindowBorder_00024WndProc_updateFrame
Java_com_install4j_runtime_flatlaf_FlatWindowsNativeWindowBorder_registryGetIntValue
Java_com_install4j_runtime_installer_platform_win32_ACLHandling_addACE
Java_com_install4j_runtime_installer_platform_win32_FileVersion_compare0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getDriveType0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getPathFromRegistry0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getShortPathName0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getSpecialFolder0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getSystemDirectory0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getUniversalPathName0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getWindowsDirectory0
Java_com_install4j_runtime_installer_platform_win32_Misc_broadcastSettingChange0
Java_com_install4j_runtime_installer_platform_win32_Misc_getEnvVarPairs0
Java_com_install4j_runtime_installer_platform_win32_Misc_getFreeDiskSpace0
Java_com_install4j_runtime_installer_platform_win32_Misc_getPhysicalMemory0
Java_com_install4j_runtime_installer_platform_win32_Misc_getPidFromHandle0
Java_com_install4j_runtime_installer_platform_win32_Misc_getRunningModules0
Java_com_install4j_runtime_installer_platform_win32_Misc_getTopLevelWindows0
Java_com_install4j_runtime_installer_platform_win32_Misc_getWindowTitle0
Java_com_install4j_runtime_installer_platform_win32_Misc_moveWithDelayUntilReboot0
Java_com_install4j_runtime_installer_platform_win32_Misc_reboot0
Java_com_install4j_runtime_installer_platform_win32_Misc_registerExtensionFunctions0
Java_com_install4j_runtime_installer_platform_win32_Misc_setForegroundWindow0
Java_com_install4j_runtime_installer_platform_win32_Misc_terminateProcesses0
Java_com_install4j_runtime_installer_platform_win32_Misc_toFront0
Java_com_install4j_runtime_installer_platform_win32_ObjectPicker_show0
Java_com_install4j_runtime_installer_platform_win32_Registry_changeNotifyAssociations0
Java_com_install4j_runtime_installer_platform_win32_Registry_createKey0
Java_com_install4j_runtime_installer_platform_win32_Registry_deleteKey0
Java_com_install4j_runtime_installer_platform_win32_Registry_deleteValue0
Java_com_install4j_runtime_installer_platform_win32_Registry_enumSubKeys0
Java_com_install4j_runtime_installer_platform_win32_Registry_enumValues0
Java_com_install4j_runtime_installer_platform_win32_Registry_getValue0
Java_com_install4j_runtime_installer_platform_win32_Registry_keyExists0
Java_com_install4j_runtime_installer_platform_win32_Registry_restoreKey0
Java_com_install4j_runtime_installer_platform_win32_Registry_saveKey0
Java_com_install4j_runtime_installer_platform_win32_Registry_setValue0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_changeNotify0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_create0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_createWide0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_initialize0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_uninitialize
Java_com_install4j_runtime_installer_platform_win32_VistaFileChooser_displayDialog0
Java_com_install4j_runtime_installer_platform_win32_VistaFileChooser_initialize0
Java_com_install4j_runtime_installer_platform_win32_VistaTaskDialog_init0
Java_com_install4j_runtime_installer_platform_win32_VistaTaskDialog_show0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_closeHandle0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_connectClient0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_connectNamedPipe0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_createListener0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_disconnectNamedPipe0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_getCurrentProcessId0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_getInvalidHandle0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_isProcessAlive0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_readDataBlock0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_writeDataBlock0
Java_com_install4j_runtime_installer_platform_win32_Win32Exec_launch0
Java_com_install4j_runtime_installer_platform_win32_Win32Handle_close0
Java_com_install4j_runtime_installer_platform_win32_Win32Handle_getDeviceName0
Java_com_install4j_runtime_installer_platform_win32_Win32Handle_list0
Java_com_install4j_runtime_installer_platform_win32_Win32Proxy_getAutoProxyConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Proxy_getDefaultConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Proxy_getIEConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Proxy_loadFunctions0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_changeServiceConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_getServiceBinary0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_getStartType0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_installService0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_queryStatus0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_setDelayedAutoStart0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_setRestartServiceConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_startService0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_stopService0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_uninstallService0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_addUser0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_deleteLocalGroup0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_deleteUser0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_executeElevated0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_getAccountName0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_getElevationType0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_getUserProfileDirectory0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_getUserSid0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_isMemberOfGroup0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_setLsaAccountRight0
Java_com_install4j_runtime_installer_platform_win32_WinGuiHelper_createHIcon0
Java_com_install4j_runtime_installer_platform_win32_WinGuiHelper_destroyHIcon0
Java_com_install4j_runtime_installer_platform_win32_WinGuiHelper_flashWindow0
Java_com_install4j_runtime_installer_platform_win32_WinGuiHelper_getHwnd0
Java_com_install4j_runtime_installer_platform_win32_WinGuiHelper_getPeer0
Java_com_install4j_runtime_installer_platform_win32_WinTaskBar_initTaskBar0
Java_com_install4j_runtime_installer_platform_win32_WinTaskBar_setOverlayIcon0
Java_com_install4j_runtime_installer_platform_win32_WinTaskBar_setProgress0
Java_com_install4j_runtime_installer_platform_win32_WinTaskBar_setState0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_clearError0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_connect0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_destroy0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_getErrorCode0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_getErrorLocation0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_getErrorMessage0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_getHeaders0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_init0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_internetErrorDlg0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_openRequest0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_read0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_sendRequest0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_setDwordOption0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_setOption0
registerNatives
registerNativesFlatlaf

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c18a09385bc06edaad7444c7412e148

Headers

File Characteristics

Imports

advapi32

ole32

oleaut32

user32

kernel32

Exports

Exports

Sections

.text Size: 106KB - Virtual size: 106KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 5KB - Virtual size: 22KB

.pdata Size: 5KB - Virtual size: 5KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 106KB - Virtual size: 106KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 5KB - Virtual size: 22KB

.pdata
Size: 5KB - Virtual size: 5KB

.reloc
Size: 1KB - Virtual size: 1KB