f312de6b9d72ebe2d7b2aea261992000736837bc89135c6c6bf718a1cdc630dc

Sharing

Copy URL Twitter E-mail

General

Target

f312de6b9d72ebe2d7b2aea261992000736837bc89135c6c6bf718a1cdc630dc
Size

93KB
MD5

69d497c8c15c1548e3c078b83b519ce9
SHA1

51f6d3bd242fa1bce86c22752647835b8fcedff4
SHA256

f312de6b9d72ebe2d7b2aea261992000736837bc89135c6c6bf718a1cdc630dc
SHA512

88179ee7c15342c80e04fd797fe1bad5bc8d33dc5a04d22241b2c6650efe6895727d0b18569437c2717e2d408d808af1dc971e00700eb6693a36f698b1ae7618
SSDEEP

1536:KwzlDBCnoY/OsSbiRvZGorZ3uEnCwPJr4RBEQ7iTGc2Mg:ZxBCoQOsSQZ3RCwPt4R+Ciyc2Mg

Score

N/A

Malware Config

Signatures

Files

f312de6b9d72ebe2d7b2aea261992000736837bc89135c6c6bf718a1cdc630dc
.exe windows x86

6a0e3bd6cd497602d228fc197c37ca2a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

nspr4

PR_Listen
PR_WaitCondVar
PR_Bind
PR_QueueJob
PR_htons
PR_StringToNetAddr
PR_Cleanup
PR_JoinThreadPool
PR_SecondsToInterval
PR_InitializeNetAddr
PR_NewTCPSocket
PR_MillisecondsToInterval
PR_Poll
PR_Recv
PR_GetError
PR_Send
PR_Connect
PR_SetSocketOption
PR_NetAddrToString
PR_ntohs
PR_Lock
PR_NotifyCondVar
PR_Unlock
PR_Shutdown
PR_GetEnv
PR_CreateThreadPool
PR_NewLock
PR_ShutdownThreadPool
PR_NewCondVar
PR_DestroyLock
PR_GetErrorTextLength
PR_GetErrorText
PR_DestroyCondVar
PR_Accept
PR_Close

plc4

PL_strdup

plds4

PL_HashTableLookup
PL_HashTableEnumerateEntries
PL_NewHashTable
PL_HashString
PL_CompareStrings
PL_HashTableDestroy
PL_HashTableAdd

ssl3

SSL_OptionSet
NSS_FindCertKEAType
SSL_ImportFD
SSL_ConfigServerSessionIDCache
SSL_ResetHandshake
NSS_SetDomesticPolicy
SSL_ConfigSecureServer

nss3

PK11_SetPasswordFunc
NSS_Init
NSS_Shutdown
PK11_FindCertFromNickname
PK11_FindKeyByAnyCert
SECKEY_DestroyPrivateKey
CERT_DestroyCertificate

mozalloc

moz_xmalloc
moz_free

msvcp90

??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

msvcr90

strncmp
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
memset
fopen
feof
fscanf
fclose
atoi
strcat
__CxxFrameHandler3
strcpy
_controlfp_s
_invoke_watson
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_invalid_parameter_noinfo
strlen
strspn
sprintf
memmove
memcpy
printf
strcmp
_initterm_e
__iob_func
vfprintf
??0exception@std@@QAE@XZ
strchr
strstr
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a0e3bd6cd497602d228fc197c37ca2a

Headers

DLL Characteristics

File Characteristics

Imports

nspr4

plc4

plds4

ssl3

nss3

mozalloc

msvcp90

msvcr90

kernel32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 64KB - Virtual size: 65KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 64KB - Virtual size: 65KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB