FREEBL_GetVector
Static task
static1
Behavioral task
behavioral1
Sample
3f6a35eb615aa957afdd2d6bfc8d7d6984aec320fc87fc5adc75278748109b26.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3f6a35eb615aa957afdd2d6bfc8d7d6984aec320fc87fc5adc75278748109b26.dll
Resource
win10v2004-20221111-en
General
-
Target
3f6a35eb615aa957afdd2d6bfc8d7d6984aec320fc87fc5adc75278748109b26
-
Size
424KB
-
MD5
028bb6a37306f5d5a147b406d71fddc5
-
SHA1
7016f90a0146eab2649b23c1d32358fcd3052dcf
-
SHA256
3f6a35eb615aa957afdd2d6bfc8d7d6984aec320fc87fc5adc75278748109b26
-
SHA512
af1e6b166c94d7df5d8786f34ce5f9444bed4a16fea41bbc3fb79c6edf1efe8d35412d5aea588b79404316bc1c59628a0ccb952b63da65b6a5375f2d1a338a77
-
SSDEEP
12288:PJkQQb1SdWKN1zqn6rIk+6J3kMezwNGWyDCP:P6SdWKN1z+6rQU7EfeP
Malware Config
Signatures
Files
-
3f6a35eb615aa957afdd2d6bfc8d7d6984aec320fc87fc5adc75278748109b26.dll windows x86
9bb568267c5814a11260857f5e94e76e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
nssutil3
PORT_GetError_Util
PORT_Alloc_Util
SECITEM_CompareItem_Util
SECITEM_ZfreeItem_Util
SECITEM_FreeItem_Util
SECITEM_CopyItem_Util
PORT_NewArena_Util
PORT_ArenaZAlloc_Util
PORT_FreeArena_Util
SECITEM_AllocItem_Util
PORT_ZFree_Util
PORT_ZAlloc_Util
PORT_Free_Util
PORT_SetError_Util
plc4
PL_strlen
nspr4
PR_GetLibraryFilePathname
PR_Open
PR_Seek
PR_Close
PR_Free
PR_Read
PR_CallOnce
PR_NewLock
PR_Lock
PR_Unlock
PR_DestroyLock
mozcrt19
toupper
_except_handler4_common
memset
memcpy
_time64
_stat64i32
sprintf
fclose
fread
fopen
strncmp
rand
free
malloc
abort
calloc
islower
isupper
isdigit
_strdup
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
kernel32
GetCurrentProcess
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GlobalMemoryStatus
GetLogicalDrives
GetComputerNameA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetVolumeInformationA
GetDiskFreeSpaceA
LoadLibraryA
GetProcAddress
FreeLibrary
GetSystemDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetTickCount
Exports
Exports
Sections
.text Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE