General

Malware Config

Signatures

Files

• Ungripping.dll

  .dll windows x86

  a38facd15189938baae5b1dff7179319

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  advapi32

  CryptAcquireContextA

  CryptCreateHash

  CryptDestroyHash

  CryptGenRandom

  CryptGetHashParam

  CryptHashData

  CryptReleaseContext

  crypt32

  CertAddCertificateContextToStore

  CertCloseStore

  CertCreateCertificateChainEngine

  CertEnumCertificatesInStore

  CertFindCertificateInStore

  CertFindExtension

  CertFreeCertificateChain

  CertFreeCertificateChainEngine

  CertFreeCertificateContext

  CertGetCertificateChain

  CertGetEnhancedKeyUsage

  CertGetIntendedKeyUsage

  CertGetNameStringA

  CertOpenStore

  CertOpenSystemStoreA

  CryptDecodeObjectEx

  CryptQueryObject

  CryptStringToBinaryA

  PFXImportCertStore

  kernel32

  CloseHandle

  CompareFileTime

  CreateFileA

  DeleteCriticalSection

  EnterCriticalSection

  FormatMessageW

  FreeLibrary

  GetEnvironmentVariableA

  GetFileSizeEx

  GetFileType

  GetLastError

  GetModuleFileNameA

  GetModuleHandleA

  GetModuleHandleExA

  GetModuleHandleW

  GetProcAddress

  GetStdHandle

  GetSystemDirectoryA

  GetSystemTimeAsFileTime

  GetTickCount

  InitializeCriticalSection

  IsDBCSLeadByteEx

  LeaveCriticalSection

  LoadLibraryA

  MoveFileExA

  MultiByteToWideChar

  PeekNamedPipe

  QueryPerformanceCounter

  QueryPerformanceFrequency

  ReadFile

  SetLastError

  Sleep

  SleepEx

  TlsGetValue

  VerSetConditionMask

  VerifyVersionInfoA

  VirtualProtect

  VirtualQuery

  WaitForMultipleObjects

  WideCharToMultiByte

  wldap32

  ber_free

  ldap_bind_s

  ldap_err2string

  ldap_first_attribute

  ldap_first_entry

  ldap_get_dn

  ldap_get_values_len

  ldap_init

  ldap_memfree

  ldap_msgfree

  ldap_next_attribute

  ldap_next_entry

  ldap_search_s

  ldap_set_option

  ldap_simple_bind_s

  ldap_sslinit

  ldap_unbind_s

  ldap_value_free_len

  ber_free

  ldap_bind_s

  ldap_err2string

  ldap_first_attribute

  ldap_first_entry

  ldap_get_dn

  ldap_get_values_len

  ldap_init

  ldap_memfree

  ldap_msgfree

  ldap_next_attribute

  ldap_next_entry

  ldap_search_s

  ldap_set_option

  ldap_simple_bind_s

  ldap_sslinit

  ldap_unbind_s

  ldap_value_free_len

  ws2_32

  WSACleanup

  WSACloseEvent

  WSACreateEvent

  WSAEnumNetworkEvents

  WSAEventSelect

  WSAGetLastError

  WSAIoctl

  WSAResetEvent

  WSASetEvent

  WSASetLastError

  WSAStartup

  WSAWaitForMultipleEvents

  __WSAFDIsSet

  accept

  bind

  closesocket

  connect

  freeaddrinfo

  getaddrinfo

  gethostname

  getpeername

  getsockname

  getsockopt

  htonl

  htons

  ioctlsocket

  listen

  ntohl

  ntohs

  recv

  recvfrom

  select

  send

  sendto

  setsockopt

  socket

  Exports

  Exports

  Rurl_easy_cleanup

  Rurl_easy_duphandle

  Rurl_easy_escape

  Rurl_easy_getinfo

  Rurl_easy_init

  Rurl_easy_option_by_id

  Rurl_easy_option_by_name

  Rurl_easy_option_next

  Rurl_easy_pause

  Rurl_easy_perform

  Rurl_easy_recv

  Rurl_easy_reset

  Rurl_easy_send

  Rurl_easy_setopt

  Rurl_easy_strerror

  Rurl_easy_unescape

  Rurl_easy_upkeep

  Rurl_escape

  Rurl_formadd

  Rurl_formfree

  Rurl_formget

  Rurl_free

  Rurl_getdate

  Rurl_getenv

  Rurl_global_cleanup

  Rurl_global_init

  Rurl_global_init_mem

  Rurl_global_sslset

  Rurl_maprintf

  Rurl_mfprintf

  Rurl_mime_addpart

  Rurl_mime_data

  Rurl_mime_data_cb

  Rurl_mime_encoder

  Rurl_mime_filedata

  Rurl_mime_filename

  Rurl_mime_free

  Rurl_mime_headers

  Rurl_mime_init

  Rurl_mime_name

  Rurl_mime_subparts

  Rurl_mime_type

  Rurl_mprintf

  Rurl_msnprintf

  Rurl_msprintf

  Rurl_multi_add_handle

  Rurl_multi_assign

  Rurl_multi_cleanup

  Rurl_multi_fdset

  Rurl_multi_info_read

  Rurl_multi_init

  Rurl_multi_perform

  Rurl_multi_poll

  Rurl_multi_remove_handle

  Rurl_multi_setopt

  Rurl_multi_socket

  Rurl_multi_socket_action

  Rurl_multi_socket_all

  Rurl_multi_strerror

  Rurl_multi_timeout

  Rurl_multi_wait

  Rurl_multi_wakeup

  Rurl_mvaprintf

  Rurl_mvfprintf

  Rurl_mvprintf

  Rurl_mvsnprintf

  Rurl_mvsprintf

  Rurl_pushheader_byname

  Rurl_pushheader_bynum

  Rurl_share_cleanup

  Rurl_share_init

  Rurl_share_setopt

  Rurl_share_strerror

  Rurl_slist_append

  Rurl_slist_free_all

  Rurl_strequal

  Rurl_strnequal

  Rurl_unescape

  Rurl_url

  Rurl_url_cleanup

  Rurl_url_dup

  Rurl_url_get

  Rurl_url_set

  Rurl_version

  WW50

  Sections

  .text

  Size: 509KB - Virtual size: 508KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 87KB - Virtual size: 87KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  /4

  Size: 72KB - Virtual size: 71KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .bss

  Size: - Virtual size: 3KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .edata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .idata

  Size: 17KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .CRT

  Size: 144KB - Virtual size: 140KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: 512B - Virtual size: 8B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .debug

  Size: 156B - Virtual size: 512B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE