331125565c61dab2c0120ea5b183a8e15d0d96595fad420f972e3199d193926e

Sharing

Copy URL Twitter E-mail

General

Target

331125565c61dab2c0120ea5b183a8e15d0d96595fad420f972e3199d193926e
Size

160KB
MD5

56c619b8135d1fbe8386800020fe7696
SHA1

0d1383b7d38a2a7a768d3504358d7f5690801785
SHA256

331125565c61dab2c0120ea5b183a8e15d0d96595fad420f972e3199d193926e
SHA512

6d2b8d532a1a22dad5737f77fe244fe4755993af106f86a493dc1131dbb1543dbb700fe9a9a311a60dd7b370f724f1d16bc705df7e5f1f1453252d1183d9f18f
SSDEEP

3072:SWAuhz/7qnmt07ogzy+Pl4mJqyomsdJQg4n5mw/:3z1ftU1t4vmsd+d3/

Score

N/A

Malware Config

Signatures

Files

331125565c61dab2c0120ea5b183a8e15d0d96595fad420f972e3199d193926e
.dll windows x86

a5e363ad4a9f58bb0976e299ef467471

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libplc4

PL_strcasecmp
PL_strncasecmp

libplds4

PL_HashTableDestroy
PL_HashTableRemove
PL_HashTableLookup
PL_HashTableAdd
PL_HashTableEnumerateEntries
PL_NewHashTable

libnspr4

PR_GetLibraryFilePathname
PR_CallOnce
PR_FindFunctionSymbol
PR_SetError
PR_smprintf
PR_smprintf_free
PR_Delete
PR_Close
PR_Write
PR_GetError
PR_OpenFile
PR_MkDir
PR_Access
PR_CloseFileMap
PR_MemUnmap
PR_Read
PR_MemMap
PR_CreateFileMap
PR_NewLock
PR_Unlock
PR_Lock
PR_DestroyLock
PR_ntohl
PR_htonl
PR_Free
PR_UnloadLibrary
PR_GetEnv
PR_FindSymbol
PR_LoadLibrary
PR_Now
PR_EnterMonitor
PR_ExitMonitor
PR_DestroyMonitor
PR_NewMonitor
PR_LoadLibraryWithFlags
PR_GetDirectorySeparator

nssutil3

PORT_NewArena_Util
PORT_SetError_Util
SECOID_SetAlgorithmID_Util
SEC_ASN1EncodeItem_Util
SECITEM_DupItem_Util
SECITEM_CopyItem_Util
SECOID_GetAlgorithmTag_Util
SEC_QuickDERDecodeItem_Util
SEC_ASN1EncodeInteger_Util
SECITEM_ZfreeItem_Util
PORT_GetError_Util
PORT_ArenaAlloc_Util
SECOID_FindOIDByTag_Util
SECITEM_FreeItem_Util
PORT_ArenaZAlloc_Util
PORT_Strdup_Util
DER_SetUInteger
PORT_Realloc_Util
SECITEM_ItemsAreEqual_Util
SECOID_Shutdown
SECITEM_HashCompare
SECOID_Init
SECITEM_AllocItem_Util
DER_DecodeTimeChoice_Util
NSS_Get_SEC_ObjectIDTemplate_Util
NSS_Get_SEC_BitStringTemplate_Util
NSS_Get_SEC_AnyTemplate_Util
PORT_ArenaRelease_Util
PORT_ArenaUnmark_Util
PORT_ArenaMark_Util
PORT_FreeArena_Util
NSS_Get_SECOID_AlgorithmIDTemplate_Util
PORT_ZAlloc_Util
PORT_Alloc_Util
PORT_Free_Util
SECOID_FindOIDTag_Util
NSSBase64_EncodeItem_Util
PORT_ArenaStrdup_Util
SECITEM_CompareItem_Util

kernel32

FileTimeToSystemTime
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapSize
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
ReadFile
GetProcessHeap
SetEndOfFile
SetFilePointer
GetConsoleMode
GetConsoleCP
RtlUnwind
LoadLibraryA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
WriteFile
HeapReAlloc
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GetCurrentDirectoryA
CreateFileA
PeekNamedPipe
GetFileInformationByHandle
CloseHandle
GetFullPathNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetStdHandle
SetHandleCount
ExitProcess
Sleep
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
GetModuleHandleW
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapAlloc
HeapFree
GetFileType
LeaveCriticalSection
FlushFileBuffers
GetCurrentThreadId
GetCommandLineA
GetLastError
FindClose
DeleteFileA
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
SetStdHandle
EnterCriticalSection

Exports

Exports

legacy_AddSecmodDB
legacy_DeleteSecmodDB
legacy_Open
legacy_ReadSecmodDB
legacy_ReleaseSecmodDBData
legacy_SetCryptFunctions
legacy_Shutdown

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5e363ad4a9f58bb0976e299ef467471

Headers

DLL Characteristics

File Characteristics

Imports

libplc4

libplds4

libnspr4

nssutil3

kernel32

Exports

Exports

Sections

.text Size: 133KB - Virtual size: 132KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 1024B - Virtual size: 784B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 133KB - Virtual size: 132KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 1024B - Virtual size: 784B

.reloc
Size: 8KB - Virtual size: 7KB