jemalloc[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

jemalloc.dll
Size

253KB
MD5

57d215a813dc4dfa4466da1beee6c503
SHA1

46bae3601ae95ee3e592d46487435b4843dc80c7
SHA256

ef2a36221cd84aa85fbfac3972ad46dc10af21a491cedd0b4d1fbc4e58d80771
SHA512

607f9409f163db866429d66c6ef30da3d4413b9aa840488ae5cc210d96570a6aa14881c587f4c5939d6b0f456650cb4ab7d7c9a7f39427e206368b96b3dc6ec4
SSDEEP

3072:Tb6WOLtGzIGwReTUFZEMUA/3GB4ML8HFkNORXJiG34obttApspUgM1vQyiC+:f8ADwkIFiMUA/3LMIlkuB9EQy

Score

1^/10

Malware Config

Signatures

Files

jemalloc.dll
.dll windows x64

4cebee0c2e86a2cfd8bec589b63f27eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

TlsSetValue
SetLastError
TryAcquireSRWLockExclusive
GetLastError
ReleaseSRWLockExclusive
GetSystemInfo
GetCurrentProcessorNumber
TlsGetValue
FormatMessageA
InitializeSRWLock
AcquireSRWLockExclusive
GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
GetCurrentProcessId
TlsAlloc
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
WriteFile
GetConsoleCP
GetConsoleMode
CreateFileW
GetFileType
CloseHandle
ReadFile
ReadConsoleW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CompareStringW
LCMapStringW
GetProcessHeap
GetStdHandle
SetStdHandle
SetFilePointerEx
SetEndOfFile
GetStringTypeW
HeapSize
HeapReAlloc
FlushFileBuffers
WriteConsoleW

Exports

Exports

je_aligned_alloc
je_calloc
je_dallocx
je_free
je_mallctl
je_mallctlbymib
je_mallctlnametomib
je_malloc
je_malloc_conf
je_malloc_message
je_malloc_stats_print
je_malloc_usable_size
je_mallocx
je_nallocx
je_posix_memalign
je_rallocx
je_realloc
je_sallocx
je_sdallocx
je_xallocx
test_hooks_arena_new_hook
test_hooks_libc_hook

Sections

.text
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4cebee0c2e86a2cfd8bec589b63f27eb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 166KB - Virtual size: 165KB

.rdata Size: 63KB - Virtual size: 63KB

.data Size: 9KB - Virtual size: 2.1MB

.pdata Size: 10KB - Virtual size: 9KB

_RDATA Size: 512B - Virtual size: 148B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 166KB - Virtual size: 165KB

.rdata
Size: 63KB - Virtual size: 63KB

.data
Size: 9KB - Virtual size: 2.1MB

.pdata
Size: 10KB - Virtual size: 9KB

_RDATA
Size: 512B - Virtual size: 148B

.reloc
Size: 3KB - Virtual size: 2KB