08fc398b082127893ef32f1a2019c940d0a04ecbc670c98aaf35c3461f5d9fda

Sharing

Copy URL Twitter E-mail

General

Target

08fc398b082127893ef32f1a2019c940d0a04ecbc670c98aaf35c3461f5d9fda
Size

196KB
MD5

419c285150e6afd6623a6ae639e37760
SHA1

3778e69bc5d6895953de4b3315ce562198a378af
SHA256

08fc398b082127893ef32f1a2019c940d0a04ecbc670c98aaf35c3461f5d9fda
SHA512

8b2e2ef1e2cf1efe654f6526d23bba6af02e27f2cbc8afbfa84f08ffe8bb8dbba544e748d10499207dfaf082ef8cf54074952e6429067bce0641dff41010b432
SSDEEP

3072:j4NybFAWha/r38GvVVXUwzBK3mg4izQaJn68dGcRwtMMFj4+yp0u0g3yq60Sr:seFAcaAQPkww3mgk8n68gck4Z0u0LqGr

Score

N/A

Malware Config

Signatures

Files

08fc398b082127893ef32f1a2019c940d0a04ecbc670c98aaf35c3461f5d9fda
.dll windows x86

aa30cdea15e050b42176efd15b409d6a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

xul

?FindChar@nsCSubstring@@QBEHDI@Z
?assign_from_gs_contractid_with_error@nsCOMPtr_base@@QAEXABVnsGetServiceByContractIDWithError@@ABUnsID@@@Z
?Rebind@nsDependentCSubstring@@QAEXABVnsCSubstring@@II@Z
?Assign@nsCSubstring@@QAEXABVnsCSubstringTuple@@@Z
?NS_CopyUnicodeToNative@@YAIABVnsAString_internal@@AAVnsACString_internal@@@Z
?assign_from_helper@nsCOMPtr_base@@QAEXABVnsCOMPtr_helper@@ABUnsID@@@Z
?Assign@nsSubstring@@QAEXPBGI@Z
??0nsCreateInstanceByContractID@@QAE@PBDPAVnsISupports@@PAI@Z
?Clone@nsMemory@@SAPAXPBXI@Z
?Adopt@nsCSubstring@@QAEXPADI@Z
?Assign@nsCSubstring@@QAEXPBDI@Z
??1nsAString_internal@@QAE@XZ
?sEmptyBuffer@?$nsCharTraits@D@@2PBDB
?sEmptyBuffer@?$nsCharTraits@G@@2PBGB
?sCanonicalVTable@nsObsoleteAString@@2PBXB
?CallCreateInstance@@YAIPBDPAVnsISupports@@ABUnsID@@PAPAX@Z
?assign_from_gs_contractid@nsCOMPtr_base@@QAEXVnsGetServiceByContractID@@ABUnsID@@@Z
?assign_from_qi@nsCOMPtr_base@@QAEXVnsQueryInterface@@ABUnsID@@@Z
?Equals@nsCSubstring@@QBEHABV1@@Z
??1nsCOMPtr_base@@QAE@XZ
NS_Free_P
NS_Alloc_P
??1nsACString_internal@@QAE@XZ
?Replace@nsCSubstring@@QAEXIIPBDI@Z
?sCanonicalVTable@nsObsoleteACString@@2PBXB
?NS_NewGenericModule2@@YAIPBUnsModuleInfo@@PAPAVnsIModule@@@Z

nspr4

PR_NewLogModule
PR_Free
PR_LogPrint
PR_UnloadLibrary
PR_FindFunctionSymbol
PR_FreeLibraryName
PR_GetLibraryName
PR_LoadLibrary

plc4

PL_Base64Encode
PL_Base64Decode
PL_strncasecmp

kernel32

DisableThreadLibraryCalls
LoadLibraryA
GetProcAddress

msvcp71

?_Nomemory@std@@YAXXZ

msvcr71

_adjust_fdiv
_initterm
_callnewh
memcpy
memset
strcpy
memcmp
__CppXcptFilter
strchr
atoi
strlen
malloc
free
sprintf
??3@YAXPAX@Z
_except_handler3
__dllonexit
_onexit
strstr

Exports

Exports

NSGetModule

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 179KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

aa30cdea15e050b42176efd15b409d6a

Headers

File Characteristics

Imports

xul

nspr4

plc4

kernel32

msvcp71

msvcr71

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 556B

.rsrc Size: 1024B - Virtual size: 888B

.reloc Size: 1024B - Virtual size: 1016B

.text Size: 179KB - Virtual size: 180KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 556B

.rsrc
Size: 1024B - Virtual size: 888B

.reloc
Size: 1024B - Virtual size: 1016B

.text
Size: 179KB - Virtual size: 180KB