NSGetModule
Static task
static1
Behavioral task
behavioral1
Sample
b90adf6aa48f8c45f57a707671b1be480e1098df8990343c56a18dc89e58cfd0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b90adf6aa48f8c45f57a707671b1be480e1098df8990343c56a18dc89e58cfd0.dll
Resource
win10v2004-20220901-en
General
-
Target
b90adf6aa48f8c45f57a707671b1be480e1098df8990343c56a18dc89e58cfd0
-
Size
316KB
-
MD5
6aaed8eeb088d67547cba0c7fb2189ca
-
SHA1
04358f299ea3e3cf5e2d1cd747bb3e545b0728d7
-
SHA256
b90adf6aa48f8c45f57a707671b1be480e1098df8990343c56a18dc89e58cfd0
-
SHA512
440af133f62bd77af32d89c2264442e22595925d454647ed28cb1e624104d8134d171cb6186a5b5ac0702b267a90917803088611dbb44450b75c1b55afd36f22
-
SSDEEP
6144:tYDDzFuk70yb5ZFwWtmVhVb6ELlYE7/hAZUvPucYE05eLCjEMoDyuIl:tYLb5ZmWtmF+J8hiU+HwMoD9Y
Malware Config
Signatures
Files
-
b90adf6aa48f8c45f57a707671b1be480e1098df8990343c56a18dc89e58cfd0.dll windows x86
f0f04b31cfa84a93a1c250c669c518f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
xpcom_core
PL_DHashFinalizeStub
PL_DHashAllocTable
?Adopt@nsCSubstring@@QAEXPADI@Z
?Assign@nsCSubstring@@QAEXABV1@@Z
?Assign@nsCSubstring@@QAEXABVnsCSubstringTuple@@@Z
?Equals@nsCSubstring@@QBEHABV1@@Z
?FindChar@nsCSubstring@@QBEHDI@Z
PL_DHashFreeTable
?Rebind@nsDependentCSubstring@@QAEXABVnsCSubstring@@II@Z
?StringBeginsWith@@YAHABVnsACString_internal@@0ABVnsCStringComparator@@@Z
PL_DHashMoveEntryStub
??_7nsDefaultCStringComparator@@6B@
?Init@nsPromiseFlatCString@@AAEXABVnsACString_internal@@@Z
?assign_from_gs_contractid_with_error@nsCOMPtr_base@@QAEXABVnsGetServiceByContractIDWithError@@ABUnsID@@@Z
?assign_from_gs_cid_with_error@nsCOMPtr_base@@QAEXABVnsGetServiceByCIDWithError@@ABUnsID@@@Z
?assign_with_AddRef@nsCOMPtr_base@@QAEXPAVnsISupports@@@Z
?HashCode@nsCRT@@SAIPBDPAI@Z
?HashCode@nsCRT@@SAIPBGPAI@Z
?strdup@nsCRT@@SAPAGPBG@Z
?strcmp@nsCRT@@SAHPBG0@Z
?sEmptyBuffer@?$nsCharTraits@D@@2PBDB
PL_DHashClearEntryStub
?GetWeakReference@nsSupportsWeakReference@@UAGIPAPAVnsIWeakReference@@@Z
?AppendUTF16toUTF8@@YAXABVnsAString_internal@@AAVnsACString_internal@@@Z
?GetReadableBuffer@nsACString_internal@@IBEIPAPBD@Z
?strcmp@nsCRT@@SAHPBD0@Z
??1nsSupportsWeakReference@@IAE@XZ
??0nsSupportsWeakReference@@QAE@XZ
??0nsGetClassObjectByContractID@@QAE@PBDPAI@Z
??0nsGetClassObjectByCID@@QAE@ABUnsID@@PAI@Z
?NS_NewArrayEnumerator@@YAIPAPAVnsISimpleEnumerator@@ABVnsCOMArray_base@@@Z
?NS_NewArrayEnumerator@@YAIPAPAVnsISimpleEnumerator@@PAVnsISupportsArray@@@Z
?RemoveObjectAt@nsCOMArray_base@@IAEHH@Z
?IndexOf@nsCOMArray_base@@IBEHPAVnsISupports@@@Z
?ReplaceASCII@nsCSubstring@@QAEXIIPBDI@Z
??0nsPrintfCString@@QAA@IPBDZZ
?AppendUTF16toUTF8@@YAXPBGAAVnsACString_internal@@@Z
??1nsPrintfCString@@QAE@XZ
?EnsureMutable@nsCSubstring@@IAEXXZ
?AssignASCII@nsCSubstring@@QAEXPBDI@Z
?IndexOf@nsVoidArray@@QBEHPAX@Z
?RFindChar@nsCString@@QBEHGHH@Z
?Clear@nsAutoVoidArray@@UAEXXZ
?CallGetService@@YAIPBDABUnsID@@PAPAX@Z
?NS_NewAtom@@YAPAVnsIAtom@@PBD@Z
?NS_NewAtom@@YAPAVnsIAtom@@ABVnsACString_internal@@@Z
?ToNewCString@@YAPADABVnsACString_internal@@@Z
?AppendUTF8toUTF16@@YAXABVnsACString_internal@@AAVnsAString_internal@@@Z
?Clear@nsCOMArray_base@@IAEXXZ
?sEmptyBuffer@?$nsCharTraits@G@@2PBGB
?Replace@nsSubstring@@QAEXIIPBGI@Z
?Assign@nsSubstring@@QAEXABV1@@Z
?Assign@nsSubstring@@QAEXABVnsAString_internal@@@Z
?EqualsASCII@nsSubstring@@QBEHPBDI@Z
?Equals@nsSubstring@@QBEHABVnsAString_internal@@@Z
?NS_RegisterStaticAtoms@@YAIPBUnsStaticAtom@@I@Z
?GrowArrayBy@nsVoidArray@@MAEHH@Z
?Trim@nsString@@QAEXPBDHHH@Z
?LossyAppendUTF16toASCII@@YAXABVnsAString_internal@@AAVnsACString_internal@@@Z
?Compact@nsAutoVoidArray@@UAEXXZ
?SizeTo@nsAutoVoidArray@@UAEHH@Z
?NS_NewAtom@@YAPAVnsIAtom@@ABVnsAString_internal@@@Z
?HashString@@YAIABVnsAString_internal@@@Z
?RemoveElementAt@nsVoidArray@@QAEHH@Z
?assign_from_gs_cid@nsCOMPtr_base@@QAEXVnsGetServiceByCID@@ABUnsID@@@Z
??_7nsDefaultStringComparator@@6B@
?StringBeginsWith@@YAHABVnsAString_internal@@0ABVnsStringComparator@@@Z
?Assign@nsAString_internal@@QAEXABV1@@Z
?Length@nsAString_internal@@QBEIXZ
?CopyUTF8toUTF16@@YAXABVnsACString_internal@@AAVnsAString_internal@@@Z
?Append@nsACString_internal@@QAEXPBD@Z
?Append@nsACString_internal@@QAEXD@Z
?Assign@nsACString_internal@@QAEXABV1@@Z
?Assign@nsCSubstring@@QAEXABVnsACString_internal@@@Z
?Equals@nsACString_internal@@QBEHABV1@@Z
?SetLength@nsSubstring@@QAEXI@Z
?Mid@nsString@@QBEIAAV1@II@Z
?assign_from_gs_contractid@nsCOMPtr_base@@QAEXVnsGetServiceByContractID@@ABUnsID@@@Z
?NS_GetWeakReference@@YAPAVnsIWeakReference@@PAVnsISupports@@PAI@Z
?strdup@nsCRT@@SAPADPBD@Z
??0nsQueryReferent@@QAE@PAVnsIWeakReference@@PAI@Z
?ReplaceASCII@nsSubstring@@QAEXIIPBDI@Z
?LowerCaseEqualsASCII@nsSubstring@@QBEHPBDI@Z
?RFindChar@nsString@@QBEHGHH@Z
?Find@nsString@@QBEHPBDHHH@Z
?EmptyString@@YAABVnsString@@XZ
??0nsSingletonEnumerator@@QAE@PAVnsISupports@@@Z
nsEscape
NS_Free_P
?CopyASCIItoUTF16@@YAXABVnsACString_internal@@AAVnsAString_internal@@@Z
?Equals@nsCSubstring@@QBEHPBD@Z
?ElementAt@nsVoidArray@@QBEPAXH@Z
?AppendElement@nsVoidArray@@QAEHPAX@Z
??0nsCOMArray_base@@IAE@XZ
?AppendObject@nsCOMArray_base@@IAEHPAVnsISupports@@@Z
??1nsFixedSizeAllocator@@QAE@XZ
??1nsAutoVoidArray@@UAE@XZ
PL_DHashTableFinish
NS_NewEmptyEnumerator
??1nsCOMArray_base@@IAE@XZ
?RemoveObject@nsCOMArray_base@@IAEHPAVnsISupports@@@Z
PL_DHashGetStubOps
PL_DHashTableOperate
?assign_from_qi_with_error@nsCOMPtr_base@@QAEXABVnsQueryInterfaceWithError@@ABUnsID@@@Z
PL_DHashTableDestroy
?Init@nsFixedSizeAllocator@@QAEIPBDPBIHHH@Z
?Alloc@nsFixedSizeAllocator@@QAEPAXI@Z
?Free@nsFixedSizeAllocator@@QAEXPAXI@Z
??0nsAutoVoidArray@@QAE@XZ
PL_NewDHashTable
PL_DHashTableEnumerate
?NS_NewISupportsArray@@YAIPAPAVnsISupportsArray@@@Z
PL_DHashTableRawRemove
PL_DHashTableInit
??0nsArrayEnumerator@@QAE@PAVnsISupportsArray@@@Z
??0nsCreateInstanceByCID@@QAE@ABUnsID@@PAVnsISupports@@PAI@Z
??0nsCreateInstanceByContractID@@QAE@PBDPAVnsISupports@@PAI@Z
?Length@nsACString_internal@@QBEIXZ
?assign_from_helper@nsCOMPtr_base@@QAEXABVnsCOMPtr_helper@@ABUnsID@@@Z
NS_NewCStringInputStream
??1nsACString_internal@@QAE@XZ
?sCanonicalVTable@nsObsoleteAString@@2PBXB
?sCanonicalVTable@nsObsoleteACString@@2PBXB
??1nsAString_internal@@QAE@XZ
?CallGetService@@YAIABUnsID@@0PAPAX@Z
??1nsCOMPtr_base@@QAE@XZ
?assign_from_qi@nsCOMPtr_base@@QAEXVnsQueryInterface@@ABUnsID@@@Z
?AppendInt@nsCString@@QAEXHH@Z
?ToInteger@nsString@@QBEHPAHI@Z
?AppendInt@nsString@@QAEXHH@Z
?AppendASCIItoUTF16@@YAXABVnsACString_internal@@AAVnsAString_internal@@@Z
?Assign@nsSubstring@@QAEXPBGI@Z
?Assign@nsCSubstring@@QAEXPBDI@Z
?Replace@nsCSubstring@@QAEXIIPBDI@Z
?SetLength@nsCSubstring@@QAEXI@Z
?CallCreateInstance@@YAIABUnsID@@PAVnsISupports@@0PAPAX@Z
?NS_NewGenericModule2@@YAIPBUnsModuleInfo@@PAPAVnsIModule@@@Z
nspr4
PR_AtomicDecrement
PR_AtomicIncrement
PR_Now
PR_Free
PR_Malloc
PR_Realloc
PR_LocalTimeParameters
PR_FormatTimeUSEnglish
PR_ParseTimeString
PR_smprintf
PR_ExplodeTime
plc4
PL_strdup
PL_strncmp
PL_strfree
plds4
PL_CompareValues
PL_HashTableDestroy
PL_NewHashTable
PL_HashTableAdd
PL_HashString
PL_CompareStrings
PL_HashTableRawLookup
PL_HashTableLookup
PL_HashTableRawRemove
kernel32
DisableThreadLibraryCalls
GetDriveTypeA
msvcp71
?_Nomemory@std@@YAXXZ
msvcr71
_adjust_fdiv
_initterm
free
_callnewh
malloc
tolower
strchr
__CppXcptFilter
sprintf
atoi
strlen
_purecall
??_V@YAXPAX@Z
memcmp
memcpy
??3@YAXPAX@Z
__dllonexit
_except_handler3
_onexit
strncmp
Exports
Exports
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE