0e29a1dfc155376c28cac481fc75201770982093ebfe10fcef73b4a23fb4e58e

Sharing

Copy URL Twitter E-mail

General

Target

0e29a1dfc155376c28cac481fc75201770982093ebfe10fcef73b4a23fb4e58e
Size

156KB
MD5

4b32b81a66e16250d37e20338b3c19b0
SHA1

9350e8331d12e2c1dacc9b07fa4914050163d3c9
SHA256

0e29a1dfc155376c28cac481fc75201770982093ebfe10fcef73b4a23fb4e58e
SHA512

7e1563d4f9d80a45a817c1e55b4e031bc2e35fe77c43c445ef8b240b8bbc16399e7c0a3d61274fa72e9cdbadf73fa30ece1ac41d7fde9482b2c8722292907dd0
SSDEEP

3072:J1uKFRt9e3AWKQTt90mOgsxMfGnQ6o/yR0kR7U3VlFSb:3uMCABu90mObxMfGQoR0bFHY

Score

N/A

Malware Config

Signatures

Files

0e29a1dfc155376c28cac481fc75201770982093ebfe10fcef73b4a23fb4e58e
.dll windows x86

9bb102afeb519f547a7b0eefb4b6fe05

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

hcrypt

certGetValidDuration
osNow
pkcDestroy
osCmpTime
certIsIssuedBy
osUnlock
hashCtrl
osLock
pkcCreate
osDestroyLock
osCreateLock
hashUpdate
hashAlgCtrl
randBytes
pkcDecrypt
hashFinal
hashInit
pkcCtrl
hashCreate
hashCopy
certCreate
pkcEncrypt
hashDestroy
certGetPKCContext
certDecode
certDestroy
convCreate
certGetCertDER
convUpdate
convDestroy
convCtrl
convInit

kernel32

InitializeCriticalSection
DeleteCriticalSection
SetEnvironmentVariableA
CompareStringA
CompareStringW
GetStringTypeW
GetStringTypeA
LCMapStringA
MultiByteToWideChar
LCMapStringW
SetFilePointer
SetStdHandle
LoadLibraryA
GetProcAddress
CloseHandle
GetACP
GetCPInfo
GetOEMCP
InterlockedIncrement
InterlockedDecrement
WriteFile
GetEnvironmentStringsW
FlushFileBuffers
WideCharToMultiByte
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapAlloc
HeapFree
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsW
GetEnvironmentStrings
ExitProcess
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
FreeEnvironmentStringsA

Exports

Exports

hsslEnd
hsslInit
sslAddCertificate
sslAddDistinguishedName
sslClose
sslCopy
sslCreate
sslDeleteSessionID
sslDestroy
sslForceHandshake
sslGetNegotiatedCipher
sslGetPeerCertificate
sslGetPeerCertificateChainLength
sslGetProtocolVersion
sslGetReadPendingSize
sslGetWritePendingSize
sslHandshake
sslRead
sslServiceWriteQueue
sslSetCertificateRef
sslSetCheckCertificateFunc
sslSetDHAnonParams
sslSetExportPrivateKey
sslSetIOFunc
sslSetIORef
sslSetOnHandshakeCompleteFunc
sslSetPeerID
sslSetPrepareClientCertFunc
sslSetPrivateKey
sslSetProtocolSide
sslSetProtocolVersion
sslSetRequestClientCert
sslSetSessionFunc
sslSetSessionRef
sslWrite

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9bb102afeb519f547a7b0eefb4b6fe05

Headers

File Characteristics

Imports

hcrypt

kernel32

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB

.rmnet
Size: 60KB - Virtual size: 60KB