502605c4494446c6d3c415a6177eb29ecdd1397e2a78324e14f536a7f51d74c6

Sharing

Copy URL Twitter E-mail

General

Target

502605c4494446c6d3c415a6177eb29ecdd1397e2a78324e14f536a7f51d74c6
Size

224KB
MD5

0c9774aa8e84705b9be4fded9019c010
SHA1

698dec2baddac05cfd2c8d806bada0115c54a6a2
SHA256

502605c4494446c6d3c415a6177eb29ecdd1397e2a78324e14f536a7f51d74c6
SHA512

8e90db322cd3e36f1f45229ac8cbf0862a27d51ddf4d8f0eb088f1ed820436f85d8ba6b4198b94563fa74f80b7611b401254c462e52ae8047e7eb0b8d4f3eeb4
SSDEEP

3072:SR/X78JHNsXvBAB6Jt/yogBclioihFyI0qm1KLA3lBtZO8Low3nDBUrRYcI:Q/YtAvBs6JV7gmlifmOIBtZOsBnWt3I

Score

N/A

Malware Config

Signatures

Files

502605c4494446c6d3c415a6177eb29ecdd1397e2a78324e14f536a7f51d74c6
.dll windows x86

290b4b36ab857750bb25d2f4492c0f88

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

plc4

PL_strncasecmp
PL_strcasecmp

plds4

PL_HashTableAdd
PL_NewHashTable
PL_HashTableDestroy
PL_HashTableEnumerateEntries
PL_HashTableRemove
PL_HashTableLookup

nspr4

PR_smprintf
PR_smprintf_free
PR_Delete
PR_Close
PR_Write
PR_GetError
PR_OpenFile
PR_MkDir
PR_Access
PR_CloseFileMap
PR_MemUnmap
PR_Read
PR_MemMap
PR_CreateFileMap
PR_NewLock
PR_Unlock
PR_Lock
PR_DestroyLock
PR_ntohl
PR_htonl
PR_Free
PR_UnloadLibrary
PR_GetEnv
PR_FindSymbol
PR_LoadLibrary
PR_Now
PR_EnterMonitor
PR_ExitMonitor
PR_DestroyMonitor
PR_NewMonitor
PR_LoadLibraryWithFlags
PR_GetDirectorySeparator
PR_GetLibraryFilePathname
PR_FindFunctionSymbol
PR_CallOnce
PR_SetError

nssutil3

NSSBase64_EncodeItem_Util
PORT_Free_Util
PORT_Alloc_Util
PORT_ZAlloc_Util
NSS_Get_SECOID_AlgorithmIDTemplate_Util
PORT_FreeArena_Util
PORT_ArenaZAlloc_Util
PORT_NewArena_Util
PORT_SetError_Util
SECOID_SetAlgorithmID_Util
SEC_ASN1EncodeItem_Util
SECITEM_DupItem_Util
SECITEM_CopyItem_Util
SECITEM_ItemsAreEqual_Util
SECOID_GetAlgorithmTag_Util
SEC_QuickDERDecodeItem_Util
SECITEM_CompareItem_Util
PORT_ArenaStrdup_Util
NSS_Get_SEC_AnyTemplate_Util
NSS_Get_SEC_BitStringTemplate_Util
NSS_Get_SEC_ObjectIDTemplate_Util
DER_DecodeTimeChoice_Util
SECITEM_AllocItem_Util
SECOID_Init
SECITEM_HashCompare
SECOID_Shutdown
PORT_Realloc_Util
DER_SetUInteger
NSS_Get_SEC_OctetStringTemplate_Util
PORT_Strdup_Util
SEC_ASN1EncodeInteger_Util
SECITEM_FreeItem_Util
SECOID_FindOIDByTag_Util
PORT_ArenaAlloc_Util
PORT_GetError_Util
SECITEM_ZfreeItem_Util
SECOID_FindOIDTag_Util

mozcrt19

_unlink
_close
_read
_open
_strdup
_write
_lseek
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
abort
calloc
malloc
memmove
free
_get_osfhandle
_stat64i32
_errno
strrchr
strncpy
isdigit
atoi
strcat
isspace
strcpy
tolower
memset
strncmp
getenv
memcmp
strlen
strcmp
memcpy
_getpid

kernel32

GetCurrentProcessId
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
FlushFileBuffers

Exports

Exports

dbopen
legacy_AddSecmodDB
legacy_DeleteSecmodDB
legacy_Open
legacy_ReadSecmodDB
legacy_ReleaseSecmodDBData
legacy_SetCryptFunctions
legacy_Shutdown
mktemp

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

290b4b36ab857750bb25d2f4492c0f88

Headers

File Characteristics

Imports

plc4

plds4

nspr4

nssutil3

mozcrt19

kernel32

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 824B

.reloc Size: 4KB - Virtual size: 3KB

.text Size: 128KB - Virtual size: 128KB

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 824B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 128KB - Virtual size: 128KB