42d87ba0d91eceeb5c2f0cc8eb74f6d5b6f1717e1dd58d12af1acd10efdadafd

Sharing

Copy URL

Twitter E-mail

General

Target

42d87ba0d91eceeb5c2f0cc8eb74f6d5b6f1717e1dd58d12af1acd10efdadafd
Size

284KB
MD5

79bf212ffd5c5a356140016e5fda79b5
SHA1

025b158f30487b83209827b531d83d42785fd8a3
SHA256

42d87ba0d91eceeb5c2f0cc8eb74f6d5b6f1717e1dd58d12af1acd10efdadafd
SHA512

3fffcc1b31acb0fd0f4b202ddb255f09a8aadb7005959edb4dabd7008d6db46bf4354da7300fb4624e99d9251f17478010faa938de5f5db9dbd2f2224db6b19f
SSDEEP

6144:aInCC1UkSz5sZ9adGzfliDPIdxU5i0XUJAFxhln+Ykb:fCCGkSGbAjKLApl+Ykb

Score

N/A

Malware Config

Signatures

Files

42d87ba0d91eceeb5c2f0cc8eb74f6d5b6f1717e1dd58d12af1acd10efdadafd
.dll windows x86

10bdce94b107238d9e3f14200a933ffe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

nss3

SECKEY_CopyPrivateKey
CERT_NameToAscii
CERT_VerifyCertName
HASH_GetHashObject
__PK11_CreateContextByRawKey
PK11_GetBestSlot
PK11_PubDecryptRaw
PK11_PubEncryptRaw
SGN_DestroyContext
SGN_End
SGN_Update
SGN_Begin
SGN_NewContext
VFY_DestroyContext
VFY_End
VFY_Update
VFY_Begin
CERT_NewTempCertificate
NSS_VersionCheck
NSS_RegisterShutdown
PK11_Finalize
CERT_FreeDistNames
CERT_GetSSLCACerts
SECKEY_CacheStaticFlags
PK11_MapSignKeyType
PK11_CopyTokenPrivKeyToSessionPrivKey
PK11_ReferenceSlot
CERT_GetDefaultCertDB
CERT_DupCertList
CERT_FreeNicknames
CERT_CheckCertValidTimes
CERT_GetCertNicknames
PK11_FindKeyByAnyCert
CERT_FindUserCertByUsage
CERT_FindCertByName
SECKEY_UpdateCertPQG
CERT_VerifyCertNow
PK11_UnwrapSymKeyWithFlags
PK11_ImportSymKey
SECKEY_CreateDHPrivateKey
PK11_PubDerive
CERT_DupCertificate
CERT_CertChainFromCert
PK11_GetSlotFromPrivateKey
PK11_GetInternalSlot
PK11_GetKeyData
CERT_DestroyCertificateList
SECKEY_CreateRSAPrivateKey
PK11_GetCurrentWrapIndex
PK11_GetWrapKey
PK11_GetBestWrapMechanism
PK11_SetWrapKey
PK11_GetMechanism
CERT_DestroyCertificate
PK11_VerifyKeyOK
PK11_ReferenceSymKey
PK11_GetBestKeyLength
SECKEY_PublicKeyStrengthInBits
PK11_WrapSymKey
PK11_UnwrapSymKey
PK11_SaveContextAlloc
PK11_DigestKey
PK11_RestoreContext
PK11_CreateDigestContext
PK11_Derive
PK11_GetSlotFromKey
PK11_SymKeyFromHandle
SECMOD_LookupSlot
PK11_IsPresent
PK11_GetSlotSeries
PK11_GetSlotID
PK11_GetModuleID
PK11_NeedLogin
PK11_IsLoggedIn
PK11_DigestBegin
PK11_DigestOp
PK11_DigestFinal
PK11_CreateContextBySymKey
PK11_IVFromParam
PK11_CipherOp
PK11_ParamFromIV
PK11_DestroyContext
PK11_HashBuf
SECKEY_SignatureLen
DSAU_DecodeDerSigToLen
DSAU_DecodeDerSig
PK11_Verify
PK11_SignatureLen
PK11_Sign
DSAU_EncodeDerSigWithLen
PK11_GenerateRandom
PK11_TokenExists
CERT_ExtractPublicKey
SECKEY_GetPrivateKeyType
PK11_GetPrivateModulusLen
PK11_GetBestSlotMultiple
PK11_KeyGen
PK11_FreeSlot
SECKEY_PublicKeyStrength
PK11_PubWrapSymKey
PK11_PrivDecryptPKCS1
PK11_PubUnwrapSymKey
SECKEY_CreateECPrivateKey
SECKEY_DestroyPrivateKey
SECKEY_DestroyPublicKey
PK11_PubDeriveWithKDF
PK11_DeriveWithFlags
PK11_ExtractKeyValue
VFY_CreateContext
PK11_FreeSymKey

nssutil3

PORT_SetError_Util
SECOID_FindOID_Util
SECOID_FindOIDByTag_Util
DER_Lengths_Util
SECITEM_CompareItem_Util
NSSRWLock_New_Util
NSSRWLock_Destroy_Util
ATOB_AsciiToData_Util
BTOA_DataToAscii_Util
NSS_PutEnv_Util
SECOID_GetAlgorithmTag_Util
PORT_Realloc_Util
SECITEM_AllocItem_Util
SECITEM_ZfreeItem_Util
PORT_ArenaAlloc_Util
PORT_NewArena_Util
PORT_ArenaZAlloc_Util
SECITEM_CopyItem_Util
PORT_GetError_Util
PORT_FreeArena_Util
PORT_ZAlloc_Util
PORT_Strdup_Util
PORT_ZFree_Util
NSSRWLock_LockRead_Util
NSSRWLock_UnlockRead_Util
NSSRWLock_LockWrite_Util
NSSRWLock_UnlockWrite_Util
PORT_Alloc_Util
PORT_Free_Util
SECITEM_FreeItem_Util

plc4

PL_strdup

nspr4

PR_ExitMonitor
PR_Sleep
PR_EnterMonitor
PR_GetError
PR_AtomicDecrement
PR_NewLock
PR_GetCurrentThread
PR_Unlock
PR_DestroyLock
PR_AtomicIncrement
PR_FindFunctionSymbol
PR_GetEnv
PR_PopIOLayer
PR_CallOnceWithArg
PR_CallOnce
PR_CloseFileMap
PR_MemUnmap
PR_MemMap
PR_smprintf_free
PR_OpenAnonFileMap
PR_smprintf
PR_ExportFileMapAsString
PR_ImportFileMapFromString
PR_EmulateSendFile
PR_EmulateAcceptRead
PR_GetIdentitiesLayer
PR_DestroyMonitor
PR_SetError
PR_ConvertIPv4AddrToIPv6
PR_GetSocketOption
PR_GetDefaultIOMethods
PR_GetUniqueIdentity
PR_PushIOLayer
PR_NewMonitor
PR_CreateIOLayerStub
PR_Close
PR_Now
PR_LoadLibraryWithFlags
PR_GetDirectorySeparator
PR_Free
PR_GetLibraryFilePathname
PR_Lock
PR_UnloadLibrary

msvcr71

_onexit
_except_handler3
__CppXcptFilter
_adjust_fdiv
malloc
_initterm
free
strrchr
strcpy
getenv
strchr
memmove
time
strlen
strspn
strstr
memcmp
_getpid
strcmp
memset
memcpy
__dllonexit

kernel32

GetCurrentThreadId
WaitForSingleObject
ReleaseMutex
CloseHandle
CreateMutexA
GetLastError
DisableThreadLibraryCalls

Exports

Exports

NSSSSL_VersionCheck
NSS_CmpCertChainWCANames
NSS_FindCertKEAType
NSS_GetClientAuthData
NSS_SetDomesticPolicy
NSS_SetExportPolicy
NSS_SetFrancePolicy
SSL_AuthCertificate
SSL_AuthCertificateHook
SSL_BadCertHook
SSL_CanBypass
SSL_CertDBHandleSet
SSL_CipherPolicyGet
SSL_CipherPolicySet
SSL_CipherPrefGet
SSL_CipherPrefGetDefault
SSL_CipherPrefSet
SSL_CipherPrefSetDefault
SSL_ClearSessionCache
SSL_ConfigMPServerSIDCache
SSL_ConfigSecureServer
SSL_ConfigServerSessionIDCache
SSL_DataPending
SSL_ForceHandshake
SSL_ForceHandshakeWithTimeout
SSL_GetChannelInfo
SSL_GetCipherSuiteInfo
SSL_GetClientAuthDataHook
SSL_GetMaxServerCacheLocks
SSL_GetSessionID
SSL_GetStatistics
SSL_HandshakeCallback
SSL_ImplementedCiphers
SSL_ImportFD
SSL_InheritMPServerSIDCache
SSL_InvalidateSession
SSL_LocalCertificate
SSL_NumImplementedCiphers
SSL_OptionGet
SSL_OptionGetDefault
SSL_OptionSet
SSL_OptionSetDefault
SSL_PeerCertificate
SSL_PreencryptedFileToStream
SSL_PreencryptedStreamToFile
SSL_ReHandshake
SSL_ReHandshakeWithTimeout
SSL_ResetHandshake
SSL_RestartHandshakeAfterCertReq
SSL_RestartHandshakeAfterServerCert
SSL_RevealCert
SSL_RevealPinArg
SSL_RevealURL
SSL_SecurityStatus
SSL_SetMaxServerCacheLocks
SSL_SetPKCS11PinArg
SSL_SetSockPeerID
SSL_SetURL
SSL_ShutdownServerSessionIDCache

Sections

.text
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

10bdce94b107238d9e3f14200a933ffe

Headers

File Characteristics

Imports

nss3

nssutil3

plc4

nspr4

msvcr71

kernel32

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 80KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 800B

.reloc Size: 8KB - Virtual size: 4KB

.text Size: 160KB - Virtual size: 160KB

.text
Size: 84KB - Virtual size: 80KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 800B

.reloc
Size: 8KB - Virtual size: 4KB

.text
Size: 160KB - Virtual size: 160KB