741bf85f9011be7f57df51a409b9b43b45bed0329d14cedc05d0f84e60c66006

Sharing

Copy URL Twitter E-mail

General

Target

741bf85f9011be7f57df51a409b9b43b45bed0329d14cedc05d0f84e60c66006
Size

129KB
MD5

88f553be556ae62c59b3a3fbea81987e
SHA1

166abd59cdf04380b939c3d216b514cbe09735f8
SHA256

741bf85f9011be7f57df51a409b9b43b45bed0329d14cedc05d0f84e60c66006
SHA512

d27e0ea06245782960bcffd41f9afbd9a7fe3bbb43f15eddbfa083568b21cc6dd15c86686fb597a0bf05d2bb4e76332eb7f28aba82e6a3695423f1458fb924c4
SSDEEP

3072:AUOZ75SYZdOhxAhuV9yMABbSRn8suaQZOXXoYC/6I4zdSbfoMR0NOBqN:AUOZ75P6muSMmWRntuTAdNN

Score

N/A

Malware Config

Signatures

Files

741bf85f9011be7f57df51a409b9b43b45bed0329d14cedc05d0f84e60c66006
.dll windows x86

e9f12bd41b659b69cfb5facb9a09bb01

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

nss3

PK11_ExportPrivateKeyInfo
PK11_DestroyPBEParams
PK11_CreatePBEParams
PK11_SetSymKeyUserData
PK11_GetTokenName
PK11_TraverseCertsForSubjectInSlot
__CERT_DecodeDERCertificate
PK11_TraverseCertsForNicknameInSlot
PK11_FindKeyByDERCert
PK11_ImportDERCert
PK11_ImportCertForKeyToSlot
SECKEY_CopyPrivateKeyInfo
CERT_IsRootDERCert
CERT_IsCADERCert
PK11_ImportPublicKey
PK11_ImportPrivateKeyInfo
PK11_ImportEncryptedPrivateKeyInfo
PK11_FindCertAndKeyByRecipientList
HASH_ResultLen
HASH_GetHashTypeByOidTag
SECKEY_DestroyPrivateKeyInfo
PK11_ExportEncryptedPrivateKeyInfo
SECKEY_CopyEncryptedPrivateKeyInfo
SECKEY_DestroyEncryptedPrivateKeyInfo
PK11_IsInternal
PK11_GetInternalKeySlot
PK11_PBEKeyGen
PK11_ReferenceSlot
PK11_GetInternalSlot
NSS_Get_SECKEY_PointerToPrivateKeyInfoTemplate
SEC_PKCS5GetCryptoAlgorithm
SEC_PKCS5GetKeyLength
PK11_DigestBegin
PK11_DigestOp
PK11_DigestFinal
PK11_HashBuf
PK11_GenerateRandom
NSS_Get_SECKEY_PointerToEncryptedPrivateKeyInfoTemplate
NSS_Get_SECKEY_PrivateKeyInfoTemplate
NSS_VersionCheck
CERT_FindSMimeProfile
HASH_GetHashObjectByOidTag
NSS_RegisterShutdown
VFY_VerifyDataDirect
VFY_VerifyDigestDirect
PK11_FindKeyByAnyCert
SEC_GetSignatureAlgorithmOidTag
SEC_SignData
NSS_Get_CERT_SetOfSignedCrlTemplate
SGN_Digest
CERT_CertListFromCert
CERT_GetDefaultCertDB
CERT_SaveSMimeProfile
CERT_GetCommonName
CERT_FindCertBySubjectKeyID
CERT_FindCertByIssuerAndSN
CERT_ImportCerts
CERT_NewCertList
CERT_AddCertToListTail
CERT_FilterCertListByUsage
CERT_DestroyCertArray
CERT_DestroyCertList
CERT_CertChainFromCert
CERT_FindCertByDERCert
CERT_VerifyCert
CERT_DestroyCertificateList
SECKEY_CopyPrivateKey
PK11_FindPrivateKeyFromCert
SECKEY_DestroyPrivateKey
CERT_FindSubjectKeyIDExtension
SECKEY_DestroySubjectPublicKeyInfo
SECKEY_CreateSubjectPublicKeyInfo
CERT_DupCertificate
CERT_GetCertIssuerAndSN
SECKEY_CopyPublicKey
CERT_DestroyCertificate
CERT_ExtractPublicKey
SECKEY_DestroyPublicKey
PK11_PubUnwrapSymKey
SECKEY_GetPublicKeyType
SECKEY_PublicKeyStrength
PK11_PubWrapSymKey
PK11_SetPasswordFunc
PK11_FindCertAndKeyByRecipientListNew
PK11_GetBestSlot
PK11_KeyGen
SEC_PKCS5IsAlgorithmPBEAlgTag
PK11_CreatePBEAlgorithmID
PK11_GenerateNewParam
PK11_ParamToAlgid
SEC_PKCS5IsAlgorithmPBEAlg
PK11_GetSymKeyUserData
PK11_GetPBECryptoMechanism
PK11_AlgtagToMechanism
PK11_ParamFromAlgid
PK11_GetBlockSize
PK11_GetSlotFromKey
PK11_IsHW
PK11_FreeSlot
PK11_CreateContextBySymKey
PK11_CipherOp
PK11_DestroyContext
PK11_FreeSymKey
PK11_ReferenceSymKey
PK11_GetKeyStrength
NSS_Get_CERT_TimeChoiceTemplate
NSS_Get_CERT_IssuerAndSNTemplate
CERT_NewTempCertificate

nssutil3

SEC_ASN1Encode_Util
SEC_ASN1EncoderAbort_Util
SEC_ASN1DecoderAbort_Util
ATOB_AsciiToData_Util
ATOB_ConvertAsciiToItem_Util
SECITEM_DupItem_Util
PORT_ZFree_Util
SEC_ASN1DecoderClearNotifyProc_Util
PORT_ArenaStrdup_Util
NSS_Get_SEC_BMPStringTemplate_Util
DER_GetInteger_Util
SEC_ASN1DecodeItem_Util
SGN_CopyDigestInfo_Util
PORT_UCS2_UTF8Conversion_Util
PORT_Realloc_Util
SECITEM_CompareItem_Util
SGN_DestroyDigestInfo_Util
PORT_UCS2_ASCIIConversion_Util
SGN_CreateDigestInfo_Util
SECITEM_ZfreeItem_Util
NSS_Get_SEC_PointerToAnyTemplate_Util
NSS_Get_sgn_DigestInfoTemplate_Util
SECITEM_ItemsAreEqual_Util
SECOID_CompareAlgorithmID_Util
DER_EncodeTimeChoice_Util
PORT_Strdup_Util
DER_DecodeTimeChoice_Util
SECOID_FindOIDTag_Util
SEC_ASN1DecodeInteger_Util
SEC_QuickDERDecodeItem_Util
SEC_ASN1EncoderClearNotifyProc_Util
SEC_ASN1EncoderSetTakeFromBuf_Util
SEC_ASN1EncoderStart_Util
SEC_ASN1EncoderSetStreaming_Util
SEC_ASN1EncoderSetNotifyProc_Util
SEC_ASN1EncoderClearTakeFromBuf_Util
SEC_ASN1EncoderClearStreaming_Util
SEC_ASN1EncoderFinish_Util
SEC_ASN1EncoderUpdate_Util
SECOID_DestroyAlgorithmID_Util
PORT_NewArena_Util
PORT_FreeArena_Util
SEC_ASN1EncodeInteger_Util
SEC_ASN1DecoderSetFilterProc_Util
SEC_ASN1DecoderClearFilterProc_Util
SEC_ASN1DecoderStart_Util
SEC_ASN1DecoderSetNotifyProc_Util
SEC_ASN1DecoderUpdate_Util
PORT_GetError_Util
PORT_Alloc_Util
SECITEM_FreeItem_Util
SECOID_CopyAlgorithmID_Util
SECOID_SetAlgorithmID_Util
SECOID_GetAlgorithmTag_Util
SECITEM_AllocItem_Util
PORT_Free_Util
PORT_ZAlloc_Util
SEC_ASN1EncodeItem_Util
NSS_Get_SEC_AnyTemplate_Util
NSS_Get_SEC_IA5StringTemplate_Util
NSS_Get_SEC_ObjectIDTemplate_Util
SECOID_FindOID_Util
PORT_SetError_Util
PORT_ArenaMark_Util
SECOID_FindOIDByTag_Util
SECITEM_CopyItem_Util
SECITEM_ArenaDupItem_Util
PORT_ArenaRelease_Util
PORT_ArenaUnmark_Util
NSS_Get_SECOID_AlgorithmIDTemplate_Util
NSS_Get_SEC_BitStringTemplate_Util
NSS_Get_SEC_OctetStringTemplate_Util
NSS_Get_SEC_PointerToOctetStringTemplate_Util
NSS_Get_SEC_SetOfAnyTemplate_Util
PORT_ArenaAlloc_Util
PORT_ArenaGrow_Util
PORT_ArenaZAlloc_Util
SEC_ASN1DecoderFinish_Util

libplc4

PL_strncasecmp

libplds4

PL_CompareValues
PL_HashTableLookupConst
PL_HashTableAdd
PL_NewHashTable
PL_HashTableDestroy

libnspr4

PR_CallOnce
PR_NewLock
PR_Lock
PR_DestroyLock
PR_Unlock
PR_Now

kernel32

HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
WriteFile
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind

Exports

Exports

CERT_ConvertAndDecodeCertificate
CERT_DecodeCertFromPackage
CERT_DecodeCertPackage
NSSSMIME_GetVersion
NSSSMIME_VersionCheck
NSS_CMSContentInfo_GetBulkKey
NSS_CMSContentInfo_GetBulkKeySize
NSS_CMSContentInfo_GetContent
NSS_CMSContentInfo_GetContentEncAlgTag
NSS_CMSContentInfo_GetContentTypeTag
NSS_CMSContentInfo_SetBulkKey
NSS_CMSContentInfo_SetContent
NSS_CMSContentInfo_SetContentEncAlg
NSS_CMSContentInfo_SetContent_Data
NSS_CMSContentInfo_SetContent_DigestedData
NSS_CMSContentInfo_SetContent_EncryptedData
NSS_CMSContentInfo_SetContent_EnvelopedData
NSS_CMSContentInfo_SetContent_SignedData
NSS_CMSContentInfo_SetDontStream
NSS_CMSDEREncode
NSS_CMSDecoder_Cancel
NSS_CMSDecoder_Finish
NSS_CMSDecoder_Start
NSS_CMSDecoder_Update
NSS_CMSDigestContext_Cancel
NSS_CMSDigestContext_FinishMultiple
NSS_CMSDigestContext_FinishSingle
NSS_CMSDigestContext_StartMultiple
NSS_CMSDigestContext_StartSingle
NSS_CMSDigestContext_Update
NSS_CMSDigestedData_Create
NSS_CMSDigestedData_Destroy
NSS_CMSDigestedData_GetContentInfo
NSS_CMSEncoder_Cancel
NSS_CMSEncoder_Finish
NSS_CMSEncoder_Start
NSS_CMSEncoder_Update
NSS_CMSEncryptedData_Create
NSS_CMSEncryptedData_Destroy
NSS_CMSEncryptedData_GetContentInfo
NSS_CMSEnvelopedData_AddRecipient
NSS_CMSEnvelopedData_Create
NSS_CMSEnvelopedData_Destroy
NSS_CMSEnvelopedData_GetContentInfo
NSS_CMSMessage_ContentLevel
NSS_CMSMessage_ContentLevelCount
NSS_CMSMessage_Copy
NSS_CMSMessage_Create
NSS_CMSMessage_CreateFromDER
NSS_CMSMessage_Destroy
NSS_CMSMessage_GetContent
NSS_CMSMessage_GetContentInfo
NSS_CMSMessage_IsEncrypted
NSS_CMSMessage_IsSigned
NSS_CMSRecipientInfo_Create
NSS_CMSRecipientInfo_CreateFromDER
NSS_CMSRecipientInfo_CreateNew
NSS_CMSRecipientInfo_CreateWithSubjKeyID
NSS_CMSRecipientInfo_CreateWithSubjKeyIDFromCert
NSS_CMSRecipientInfo_Destroy
NSS_CMSRecipientInfo_Encode
NSS_CMSRecipientInfo_GetCertAndKey
NSS_CMSRecipientInfo_UnwrapBulkKey
NSS_CMSRecipientInfo_WrapBulkKey
NSS_CMSSignedData_AddCertChain
NSS_CMSSignedData_AddCertList
NSS_CMSSignedData_AddCertificate
NSS_CMSSignedData_AddDigest
NSS_CMSSignedData_AddSignerInfo
NSS_CMSSignedData_Create
NSS_CMSSignedData_CreateCertsOnly
NSS_CMSSignedData_Destroy
NSS_CMSSignedData_GetContentInfo
NSS_CMSSignedData_GetDigestAlgs
NSS_CMSSignedData_GetSignerInfo
NSS_CMSSignedData_HasDigests
NSS_CMSSignedData_ImportCerts
NSS_CMSSignedData_SetDigestValue
NSS_CMSSignedData_SetDigests
NSS_CMSSignedData_SignerInfoCount
NSS_CMSSignedData_VerifyCertsOnly
NSS_CMSSignedData_VerifySignerInfo
NSS_CMSSignerInfo_AddMSSMIMEEncKeyPrefs
NSS_CMSSignerInfo_AddSMIMECaps
NSS_CMSSignerInfo_AddSMIMEEncKeyPrefs
NSS_CMSSignerInfo_AddSigningTime
NSS_CMSSignerInfo_Create
NSS_CMSSignerInfo_CreateWithSubjKeyID
NSS_CMSSignerInfo_Destroy
NSS_CMSSignerInfo_GetCertList
NSS_CMSSignerInfo_GetSignerCommonName
NSS_CMSSignerInfo_GetSignerEmailAddress
NSS_CMSSignerInfo_GetSigningCertificate
NSS_CMSSignerInfo_GetSigningTime
NSS_CMSSignerInfo_GetVerificationStatus
NSS_CMSSignerInfo_GetVersion
NSS_CMSSignerInfo_IncludeCerts
NSS_CMSType_RegisterContentType
NSS_CMSUtil_VerificationStatusToString
NSS_Get_NSSCMSGenericWrapperDataTemplate
NSS_Get_NSS_PointerToCMSGenericWrapperDataTemplate
NSS_SMIMESignerInfo_SaveSMIMEProfile
NSS_SMIMEUtil_CreateMSSMIMEEncKeyPrefs
NSS_SMIMEUtil_FindBulkAlgForRecipients
SECMIME_DecryptionAllowed
SEC_PKCS12AddCertAndKey
SEC_PKCS12AddCertOrChainAndKey
SEC_PKCS12AddPasswordIntegrity
SEC_PKCS12CreateExportContext
SEC_PKCS12CreatePasswordPrivSafe
SEC_PKCS12CreateUnencryptedSafe
SEC_PKCS12DecoderFinish
SEC_PKCS12DecoderGetCerts
SEC_PKCS12DecoderImportBags
SEC_PKCS12DecoderIterateInit
SEC_PKCS12DecoderIterateNext
SEC_PKCS12DecoderSetTargetTokenCAs
SEC_PKCS12DecoderStart
SEC_PKCS12DecoderUpdate
SEC_PKCS12DecoderValidateBags
SEC_PKCS12DecoderVerify
SEC_PKCS12DecryptionAllowed
SEC_PKCS12DestroyExportContext
SEC_PKCS12EnableCipher
SEC_PKCS12Encode
SEC_PKCS12IsEncryptionAllowed
SEC_PKCS12SetPreferredCipher
SEC_PKCS7AddCertificate
SEC_PKCS7AddRecipient
SEC_PKCS7AddSigningTime
SEC_PKCS7ContainsCertsOrCrls
SEC_PKCS7ContentIsEncrypted
SEC_PKCS7ContentIsSigned
SEC_PKCS7ContentType
SEC_PKCS7CopyContentInfo
SEC_PKCS7CreateCertsOnly
SEC_PKCS7CreateData
SEC_PKCS7CreateEncryptedData
SEC_PKCS7CreateEnvelopedData
SEC_PKCS7CreateSignedData
SEC_PKCS7DecodeItem
SEC_PKCS7DecoderAbort
SEC_PKCS7DecoderFinish
SEC_PKCS7DecoderStart
SEC_PKCS7DecoderUpdate
SEC_PKCS7DecryptContents
SEC_PKCS7DestroyContentInfo
SEC_PKCS7Encode
SEC_PKCS7EncodeItem
SEC_PKCS7EncoderAbort
SEC_PKCS7EncoderFinish
SEC_PKCS7EncoderStart
SEC_PKCS7EncoderUpdate
SEC_PKCS7GetCertificateList
SEC_PKCS7GetContent
SEC_PKCS7GetEncryptionAlgorithm
SEC_PKCS7GetSignerCommonName
SEC_PKCS7GetSignerEmailAddress
SEC_PKCS7GetSigningTime
SEC_PKCS7IncludeCertChain
SEC_PKCS7IsContentEmpty
SEC_PKCS7SetContent
SEC_PKCS7VerifyDetachedSignature
SEC_PKCS7VerifySignature

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9f12bd41b659b69cfb5facb9a09bb01

Headers

DLL Characteristics

File Characteristics

Imports

nss3

nssutil3

libplc4

libplds4

libnspr4

kernel32

Exports

Exports

Sections

.text Size: 91KB - Virtual size: 91KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 1024B - Virtual size: 776B

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 91KB - Virtual size: 91KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 1024B - Virtual size: 776B

.reloc
Size: 5KB - Virtual size: 5KB