OraOLEDBrst12[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

OraOLEDBrst12.dll
Size

163KB
MD5

73a32e21a922e337ef5b13e32574cb73
SHA1

49b602e2f7d1c01f094da95d0c73f5bbf03a4c7e
SHA256

692994a2a3ff0d5930aa50557f0578e85c09d32502d6987ec9ba704b14b6a088
SHA512

e89c23f15f2ffeb9d480bf0916cc6e9b00f415528a508a3d2bba2c41b53433307280fc83fd07a3557b06e1fb820f60191876916527b4a896aadb885500c661c8
SSDEEP

3072:BDxNHIZ4u3AwrB3O7vUyJcVgpectG/n+RZqPHkiCAbjmkO:BDw9Hrk0gpRG/t7nmk

Score

1^/10

Malware Config

Signatures

Files

OraOLEDBrst12.dll
.dll windows x64

e232b29ada24bea9bf48236a5e12385c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

oci

lmsagbf
lmsaicmt
lxhLangEnv
lxhLaToId
lxinitc
ldirtzd
ldigtzd
lnxsni
lxlterm
kpu_gtz
ssoraupi
lxlinit
lxldini
lxzinit
lfvinit
lnxn2c
lnxcpn
OCIStmtPrepare2
OCIStmtPrepare
lxgucs2utf
lxgutf2ucs
lxgt2u
lmsatrm
lxsulen
lxmcpen
OCIStmtFetch
OCIBindDynamic
OCILobFileOpen
OCIBindByName
OCIBindByPos
OCIDescriptorAlloc
OCIDefineByPos
OCILobTrim
OCILobWrite
OCILobGetLength
OCILobFileClose
OCIStmtExecute
OCIHandleAlloc
OCIStmtRelease
OCIHandleFree
OCIAttrGet
OCIErrorGet
OCIAttrSet
lxhname2id
lxhcsn
OCITransCommit
lxmuppx
lxoCvChar
lxoSkip
lxoSchPat
LdiDateConstructN
LdiDateToArray
LdiDateFromArray
LdiInterFromTZ
LdiDateDateConvert
OCIParamGet
OCIServerVersion
OCIStmtGetPieceInfo
OCIStmtSetPieceInfo
OCILobLocatorAssign
OCILobRead
OCIDescriptorFree
OCIDefineArrayOfStruct
LdiDateToJulian
LdiJulianToDate
LdiDateDateSubtract
lnxsgn
lnxabs
lnxshift
lnxpflg
lnxnft
lnxmin
lnxpow
lnxmul
lnxadd
lnxneg
lnxcmp
lxgu2t
lnxnur
lxhid2name
lxdsupsn
lxhci2h
lxldfcb
lxgratio

oraoledbutl12

RowErrorMsgSet
ReadRegTraceInfo
ssmem_realloc
TraceCategory
TraceLevel
OraTrace
ssmem_free
ssmem_alloc

kernel32

EncodePointer
DecodePointer
Sleep
GetSystemTimeAsFileTime
GetCurrentProcess
UnhandledExceptionFilter
SetDllDirectoryA
TlsFree
TlsGetValue
TlsAlloc
VirtualAlloc
TlsSetValue
VirtualFree
LoadLibraryA
GetLastError
GetProcAddress
FreeLibrary
FormatMessageA
LocalFree
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
lstrcmpiA
lstrcpyA
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess

user32

CharUpperBuffW

advapi32

RegQueryValueExA

msvcr100

_onexit
__dllonexit
_unlock
__clean_type_info_names_internal
__crt_debugger_hook
__CppXcptFilter
_amsg_exit
_encoded_null
_initterm_e
_initterm
_malloc_crt
free
__C_specific_handler
sprintf
memcmp
towlower
wcsstr
_wcsicmp
strchr
isdigit
strtok
atoi
wcsncat
strncat
iswctype
modf
_wcsupr
wcsncmp
_wcsnicmp
_swprintf
memset
memcpy
_lock

Exports

Exports

ROWAddRefStmtMetaData
ROWAllocErrorHandle
ROWByteArrayToDate
ROWCharSetToUnicode
ROWCharUseUCS2ForCHAR
ROWClose
ROWCreate
ROWDataBind
ROWDataDefine
ROWDataDelete
ROWDataGet
ROWDataGetBufPtr
ROWDataGetChunk
ROWDataGetChunkLen
ROWDataGetStatus
ROWDataGetTimeStamp
ROWDataInsert
ROWDataLock
ROWDataPutChunk
ROWDataResync
ROWDataSetTimeStamp
ROWDataUpdate
ROWDateToByteArray
ROWDeferCount
ROWDeferDelete
ROWDeferFlush
ROWDeferGet
ROWDeferGetPendingStatus
ROWDeferInsert
ROWDeferRows
ROWDeferUndo
ROWDeferUpdate
ROWDupUCS2ToUTF8
ROWDupUTF8ToUCS2
ROWErrorDatabase
ROWErrorInternal
ROWErrorText
ROWFreeCachedBuffer
ROWFreeErrorHandle
ROWFreeStmtMetaDataInCache
ROWInit
ROWInitCtx
ROWInitRefCur
ROWIntToNum
ROWMetaCopy
ROWMetaFree
ROWMetaGet
ROWMetaGetNoOfHiddenCols
ROWMetaGetNumberOfCols
ROWNavFindFirst
ROWNavFindLast
ROWNavFindNext
ROWNavFindPrev
ROWNavGetBookMark
ROWNavGetCurrentRow
ROWNavGetLastValidRow
ROWNavGetRecordCount
ROWNavIsBOF
ROWNavIsDeletedRow
ROWNavIsEOF
ROWNavIsFirst
ROWNavIsLast
ROWNavMoveBackToOriginal
ROWNavMoveFirst
ROWNavMoveLast
ROWNavMoveNext
ROWNavMovePrev
ROWNavMoveTo
ROWNavMoveToMark
ROWNumToInt
ROWNumToOLEDec
ROWNumToOLENum
ROWNumToReal
ROWNumToStr
ROWOLEDecToNum
ROWOLENumToNum
ROWStmtPrepare
ROWStrToNum
ROWTxnCommit
ROWTxnMode
ROWTxnRollback
ROWUnicodeToCharSet
ROWVersion

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e232b29ada24bea9bf48236a5e12385c

Headers

DLL Characteristics

File Characteristics

Imports

oci

oraoledbutl12

kernel32

user32

advapi32

msvcr100

Exports

Exports

Sections

.text Size: 131KB - Virtual size: 131KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 6KB - Virtual size: 6KB

.rsrc Size: 1024B - Virtual size: 1008B

.reloc Size: 512B - Virtual size: 180B

.text
Size: 131KB - Virtual size: 131KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 1024B - Virtual size: 1008B

.reloc
Size: 512B - Virtual size: 180B