D:\a\jnativehook\jnativehook\target\build\jni\RelWithDebInfo\JNativeHook.pdb
Static task
static1
General
-
Target
JNativeHook-2.2.2.x86_64.dll
-
Size
80KB
-
MD5
e9a449971b9efb0a2e12b9cfdd95c076
-
SHA1
385777659fa84e94a3812eb9a8afad27ae3ceed4
-
SHA256
b8c331c9f915960201da9af9c9dc8309e95e7d533741e71f4a5d13ca007d3e18
-
SHA512
bbcaf66b316cb60c63bb190099bee36a0059f13fa35fdf3a9a3e7e9a5304abe57acd71d644cde554427825249b460d58f0aba79f599f0c6fa40d23ea21aa941d
-
SSDEEP
768:uBgVKEtsnmPFF1/xKn6qo8XwooW2+7iXCZ9NtAPf:uBlWNFxMnLoQ++7l7Uf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JNativeHook-2.2.2.x86_64.dll
Files
-
JNativeHook-2.2.2.x86_64.dll.dll windows:6 windows x64 arch:x64
2d3e6a279e506b2460f3799f9cf3c216
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
kernel32
GetLastError
GetCurrentThreadId
GetModuleHandleA
GetSystemDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlCaptureContext
user32
EnumDisplayMonitors
GetSystemMetrics
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetAsyncKeyState
GetForegroundWindow
GetWindowThreadProcessId
GetDoubleClickTime
GetMessageA
TranslateMessage
DispatchMessageA
GetMessageTime
PostThreadMessageA
ActivateKeyboardLayout
SendInput
UnhookWinEvent
SetWinEventHook
SystemParametersInfoA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetKeyState
vcruntime140
__std_type_info_destroy_list
__C_specific_handler
memset
__current_exception
memcpy
__current_exception_context
api-ms-win-crt-runtime-l1-1-0
exit
terminate
_cexit
_crt_at_quick_exit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_crt_atexit
_register_onexit_function
_execute_onexit_table
api-ms-win-crt-heap-l1-1-0
calloc
realloc
malloc
free
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
api-ms-win-crt-string-l1-1-0
strcat_s
strcpy_s
Exports
Exports
JNI_OnLoad
JNI_OnUnload
Java_com_github_kwhat_jnativehook_GlobalScreen_00024NativeHookThread_disable
Java_com_github_kwhat_jnativehook_GlobalScreen_00024NativeHookThread_enable
Java_com_github_kwhat_jnativehook_GlobalScreen_getAutoRepeatDelay
Java_com_github_kwhat_jnativehook_GlobalScreen_getAutoRepeatRate
Java_com_github_kwhat_jnativehook_GlobalScreen_getMultiClickIterval
Java_com_github_kwhat_jnativehook_GlobalScreen_getNativeMonitors
Java_com_github_kwhat_jnativehook_GlobalScreen_getPointerAccelerationMultiplier
Java_com_github_kwhat_jnativehook_GlobalScreen_getPointerAccelerationThreshold
Java_com_github_kwhat_jnativehook_GlobalScreen_getPointerSensitivity
Java_com_github_kwhat_jnativehook_GlobalScreen_postNativeEvent
hook_create_screen_info
hook_get_auto_repeat_delay
hook_get_auto_repeat_rate
hook_get_multi_click_time
hook_get_pointer_acceleration_multiplier
hook_get_pointer_acceleration_threshold
hook_get_pointer_sensitivity
hook_post_event
hook_run
hook_set_dispatch_proc
hook_set_logger_proc
hook_stop
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 373B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 451B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ