General

Malware Config

Signatures

Files

• freebl3.dll

  .dll windows x86

  f781fa19ee3108d3fcdb3967b70bbdf5

  
  

  Code Sign

  0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2031 00:00

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  02:6a:53:45:5c:c7:00:12:fa:23:ce:7a:80:f8:5e:47

  Certificate

  Issuer

  CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-07-2013 12:00

  Not After

  22-10-2023 12:00

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0c:1c:d3:ee:a4:7e:dd:a7:a0:32:57:3b:01:4d:0a:fd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  09-04-2021 00:00

  Not After

  19-06-2024 23:59

  Subject

  CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  29-03-2022 00:00

  Not After

  14-03-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  4f:81:bd:04:2e:62:5d:26:c3:84:19:94:fc:4c:80:82:02:cb:22:df:a6:96:50:fe:df:bf:c5:bc:4f:8d:b7:0e

  Signer

  Actual PE Digest

  4f:81:bd:04:2e:62:5d:26:c3:84:19:94:fc:4c:80:82:02:cb:22:df:a6:96:50:fe:df:bf:c5:bc:4f:8d:b7:0e

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  nss3

  NSS_SecureMemcmp

  NSS_SecureMemcmpZero

  PORT_Alloc_Util

  PORT_ArenaAlloc_Util

  PORT_ArenaZAlloc_Util

  PORT_FreeArena_Util

  PORT_Free_Util

  PORT_GetError_Util

  PORT_NewArena_Util

  PORT_SetError_Util

  PORT_ZAllocAlignedOffset_Util

  PORT_ZAlloc_Util

  PORT_ZFree_Util

  PR_CallOnce

  PR_DestroyCondVar

  PR_DestroyLock

  PR_GetEnvSecure

  PR_Lock

  PR_NewCondVar

  PR_NewLock

  PR_NotifyAllCondVar

  PR_NotifyCondVar

  PR_Unlock

  PR_WaitCondVar

  SECITEM_AllocItem_Util

  SECITEM_CompareItem_Util

  SECITEM_CopyItem_Util

  SECITEM_FreeItem_Util

  SECITEM_ZfreeItem_Util

  SECOID_FindOIDTag_Util

  advapi32

  SystemFunction036

  kernel32

  DisableThreadLibraryCalls

  GetComputerNameA

  GetCurrentProcess

  GetCurrentProcessId

  GetCurrentThreadId

  GetDiskFreeSpaceA

  GetLogicalDrives

  GetSystemTimeAsFileTime

  GetTickCount

  GetVolumeInformationA

  GlobalMemoryStatus

  InitializeSListHead

  IsDebuggerPresent

  IsProcessorFeaturePresent

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  TerminateProcess

  UnhandledExceptionFilter

  vcruntime140

  __std_type_info_destroy_list

  _except_handler4_common

  memcmp

  memcpy

  memmove

  memset

  api-ms-win-crt-utility-l1-1-0

  _byteswap_ulong

  api-ms-win-crt-runtime-l1-1-0

  _cexit

  _configure_narrow_argv

  _execute_onexit_table

  _initialize_narrow_environment

  _initialize_onexit_table

  _initterm

  _initterm_e

  _seh_filter_dll

  abort

  api-ms-win-crt-string-l1-1-0

  _strdup

  strlen

  api-ms-win-crt-time-l1-1-0

  _time64

  api-ms-win-crt-heap-l1-1-0

  calloc

  free

  malloc

  Exports

  Exports

  FREEBL_GetVector

  Sections

  .text

  Size: 515KB - Virtual size: 515KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 130KB - Virtual size: 129KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .00cfg

  Size: 512B - Virtual size: 4B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 888B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ