NSGetModule
Static task
static1
Behavioral task
behavioral1
Sample
06de1a81389e7906b921067d551e91e2650e9c5b313fa3694cfd7b128c0f20f8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
06de1a81389e7906b921067d551e91e2650e9c5b313fa3694cfd7b128c0f20f8.dll
Resource
win10v2004-20220812-en
General
-
Target
06de1a81389e7906b921067d551e91e2650e9c5b313fa3694cfd7b128c0f20f8
-
Size
249KB
-
MD5
622fa2af5a127859358be65351b03a16
-
SHA1
7153e3704eb2f4de54e524b1d958f4c95be9e569
-
SHA256
06de1a81389e7906b921067d551e91e2650e9c5b313fa3694cfd7b128c0f20f8
-
SHA512
b0c0b4d57c5e4753d115b62f67a306f84488cec69a2fddc00f51ac3a5b74f3cb1bb234499941178a2f714fec1d86f5812758ed5876e1dd34df6f28c3e0c57123
-
SSDEEP
6144:Dcde6ELlYE7/hAZUvPucYE05eLCjEMoDyuI4:DcpJ8hiU+HwMoD9d
Malware Config
Signatures
Files
-
06de1a81389e7906b921067d551e91e2650e9c5b313fa3694cfd7b128c0f20f8.dll windows x86
8cc5066ed0c93a7e806ad447aeec22ef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mozz
MOZ_Z_inflateEnd
MOZ_Z_crc32
MOZ_Z_inflateInit2_
MOZ_Z_inflate
xpcom_core
??1nsAutoLock@@QAE@XZ
??0nsAutoLock@@QAE@PAUPRLock@@@Z
?Enumerate@nsSupportsHashtable@@QAEXP6AHPAVnsHashKey@@PAX1@Z1@Z
??0nsSupportsHashtable@@QAE@IH@Z
??0nsCreateInstanceByContractID@@QAE@PBDPAVnsISupports@@PAI@Z
?NS_NewGenericModule2@@YAIPBUnsModuleInfo@@PAPAVnsIModule@@@Z
??1nsRecyclingAllocator@@QAE@XZ
?assign_from_qi@nsCOMPtr_base@@QAEXVnsQueryInterface@@ABUnsID@@@Z
?AssignASCII@nsACString_internal@@QAEXPBDI@Z
?AssignASCII@nsCSubstring@@QAEXPBDI@Z
??0nsSupportsWeakReference@@QAE@XZ
?EqualsASCII@nsCSubstring@@QBEHPBDI@Z
?assign_from_gs_cid_with_error@nsCOMPtr_base@@QAEXABVnsGetServiceByCIDWithError@@ABUnsID@@@Z
?Assign@nsACString_internal@@QAEXABV1@@Z
?Assign@nsCSubstring@@QAEXABVnsCSubstringTuple@@@Z
?Rebind@nsDependentCSubstring@@QAEXABVnsACString_internal@@II@Z
?Rebind@nsDependentCSubstring@@QAEXABVnsCSubstring@@II@Z
NS_Alloc_P
?StringBeginsWith@@YAHABVnsACString_internal@@0ABVnsCStringComparator@@@Z
??_7nsDefaultCStringComparator@@6B@
?RFindInReadable@@YAHABVnsACString_internal@@AAV?$nsReadingIterator@D@@1ABVnsCStringComparator@@@Z
?GetReadableBuffer@nsACString_internal@@IBEIPAPBD@Z
?Append@nsACString_internal@@QAEXABVnsCSubstringTuple@@@Z
?Assign@nsACString_internal@@QAEXABVnsCSubstringTuple@@@Z
?Assign@nsACString_internal@@QAEXPBD@Z
?SetLength@nsACString_internal@@QAEXI@Z
?Length@nsACString_internal@@QBEIXZ
??1nsSupportsWeakReference@@IAE@XZ
??1nsACString_internal@@QAE@XZ
?GetWeakReference@nsSupportsWeakReference@@UAGIPAPAVnsIWeakReference@@@Z
?sCanonicalVTable@nsObsoleteAString@@2PBXB
?sCanonicalVTable@nsObsoleteACString@@2PBXB
?sEmptyBuffer@?$nsCharTraits@D@@2PBDB
??_7nsCaseInsensitiveCStringComparator@@6B@
??1nsAString_internal@@QAE@XZ
??1nsCOMPtr_base@@QAE@XZ
?assign_with_AddRef@nsCOMPtr_base@@QAEXPAVnsISupports@@@Z
?assign_from_qi_with_error@nsCOMPtr_base@@QAEXABVnsQueryInterfaceWithError@@ABUnsID@@@Z
?assign_from_gs_contractid@nsCOMPtr_base@@QAEXVnsGetServiceByContractID@@ABUnsID@@@Z
?assign_from_gs_contractid_with_error@nsCOMPtr_base@@QAEXABVnsGetServiceByContractIDWithError@@ABUnsID@@@Z
?assign_from_helper@nsCOMPtr_base@@QAEXABVnsCOMPtr_helper@@ABUnsID@@@Z
??1nsSupportsHashtable@@UAE@XZ
?Put@nsSupportsHashtable@@QAEHPAVnsHashKey@@PAVnsISupports@@PAPAV3@@Z
?Get@nsSupportsHashtable@@QAEPAVnsISupports@@PAVnsHashKey@@@Z
?Remove@nsSupportsHashtable@@QAEHPAVnsHashKey@@PAPAVnsISupports@@@Z
?Reset@nsSupportsHashtable@@QAEXXZ
??0nsObjectHashtable@@QAE@P6APAXPAVnsHashKey@@PAX1@Z1P6AH011@Z1IH@Z
??1nsObjectHashtable@@UAE@XZ
?RFindChar@nsCString@@QBEHGHH@Z
?Assign@nsCSubstring@@QAEXABVnsACString_internal@@@Z
?Mid@nsCString@@QBEIAAV1@II@Z
?ToNewCString@@YAPADABVnsACString_internal@@@Z
?AppendWithConversion@nsString@@QAEXPBDH@Z
?Exists@nsHashtable@@QAEHPAVnsHashKey@@@Z
?Put@nsHashtable@@QAEPAXPAVnsHashKey@@PAX@Z
?Get@nsHashtable@@QAEPAXPAVnsHashKey@@@Z
?AssignASCII@nsSubstring@@QAEXPBDI@Z
?Replace@nsSubstring@@QAEXIIPBGI@Z
?ReplaceASCII@nsSubstring@@QAEXIIPBDI@Z
?FindChar@nsCSubstring@@QBEHDI@Z
?Equals@nsCSubstring@@QBEHPBD@Z
?Equals@nsCSubstring@@QBEHABV1@ABVnsCStringComparator@@@Z
?Assign@nsCSubstring@@QAEXABV1@@Z
?Assign@nsCSubstring@@QAEXPBDI@Z
?Adopt@nsCSubstring@@QAEXPADI@Z
?Replace@nsCSubstring@@QAEXIIPBDI@Z
??0nsCStringKey@@QAE@ABVnsCString@@@Z
??0nsCStringKey@@QAE@PBDHW4Ownership@0@@Z
??1nsCStringKey@@UAE@XZ
?Calloc@nsRecyclingAllocator@@QAEPAXII@Z
??0nsRecyclingAllocator@@QAE@IIPBD@Z
?Free@nsRecyclingAllocator@@QAEXPAX@Z
??0nsCreateInstanceByCID@@QAE@ABUnsID@@PAVnsISupports@@PAI@Z
nspr4
PR_DestroyLock
PR_Seek
PR_Read
PR_Write
PR_ParseTimeString
PR_Close
PR_Free
PR_Malloc
PR_AtomicDecrement
PR_IntervalNow
PR_snprintf
PR_NewLock
PR_AtomicIncrement
plc4
PL_strcmp
PL_strfree
PL_strdup
PL_strlen
PL_strpbrk
PL_strcpy
PL_strcasecmp
plds4
PL_ArenaAllocate
PL_InitArenaPool
PL_FinishArenaPool
msvcp71
?_Nomemory@std@@YAXXZ
msvcr71
strcmp
memcpy
_onexit
__dllonexit
_except_handler3
__CppXcptFilter
_adjust_fdiv
_initterm
free
malloc
_callnewh
toupper
isalnum
strlen
??3@YAXPAX@Z
memset
calloc
kernel32
DisableThreadLibraryCalls
Exports
Exports
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 207KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE