fb75ddcf29fd6829ccf01998fd3626520ebe57995e2f45871f810282875af4e8

Sharing

Copy URL Twitter E-mail

General

Target

fb75ddcf29fd6829ccf01998fd3626520ebe57995e2f45871f810282875af4e8
Size

30KB
MD5

7a300eca779a3a9d555508910e57ed54
SHA1

0a3a733b31a0bfdd7cc0957aa8f9aa34f032ce0a
SHA256

fb75ddcf29fd6829ccf01998fd3626520ebe57995e2f45871f810282875af4e8
SHA512

8489f5410cf9a6ef2af4f09a82b16ec5865104b817ba9f2f4c745813981d6e438e43d6c1233429dc0b2c3b1d3106788e4f515bf41eda2d285d5ecfd1d1b3f106
SSDEEP

384:s8crM6+4MbbvQwMoEHw6YtpZwzantV9/7kAmQ/IyjOZajtJbAqwIffyiqkfull/:s88MeGFgMgAhA+TwyqidA/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb75ddcf29fd6829ccf01998fd3626520ebe57995e2f45871f810282875af4e8

Files

fb75ddcf29fd6829ccf01998fd3626520ebe57995e2f45871f810282875af4e8
.dll windows x86

e5109741a563da80b2d66fa73aefa240

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

php8ts

_php_stream_read
_try_convert_to_string@@4
zend_hash_destroy@@4
zval_ptr_dtor
add_assoc_zval_ex
_php_stream_alloc
zend_fetch_resource2_ex
zend_empty_string
_emalloc@@4
_efree@@4
php_error_docref
_zend_bailout
zval_get_long_func@@8
add_assoc_long_ex
zval_try_get_string_func@@4
zend_one_char_string
php_file_le_pstream
php_file_le_stream
php_pdo_unregister_driver
php_pdo_register_driver
php_pdo_get_dbh_ce
tsrm_mutex_lock
php_info_print_table_end
tsrm_mutex_alloc
zend_declare_class_constant_long
tsrm_mutex_free
php_info_print_table_header
tsrm_mutex_unlock
_zend_new_array@@4
php_info_print_table_start
add_assoc_string_ex
_estrdup@@4
ap_php_slprintf
__zend_malloc
__zend_strdup
pdo_get_long_param
__zend_calloc
pdo_parse_params
php_pdo_parse_data_source
php_pdo_get_exception
add_next_index_long
add_next_index_string
_ecalloc@@8
zend_hash_index_find@@8
pdo_get_bool_param
zend_throw_exception_ex

oci

OCIClientVersion
OCIStmtPrepare
OCIServerRelease
OCIAttrGet
OCIServerAttach
OCIHandleFree
OCITransRollback
OCINlsCharSetNameToId
OCIEnvCreate
OCILobFlushBuffer
OCILobRead
OCIStmtFetch2
OCIStmtFetch
OCILobIsTemporary
OCIBindDynamic
OCIParamGet
OCILobOpen
OCIDefineByPos
OCILobClose
OCIDescriptorAlloc
OCIBindByName
OCIBindByPos
OCILobCharSetForm
OCILobWrite
OCILobFreeTemporary
OCIDescriptorFree
OCIDefineDynamic
OCIAttrSet
OCINlsNumericInfoGet
OCIPing
OCIServerDetach
OCIHandleAlloc
OCIStmtExecute
OCIEnvNlsCreate
OCITransCommit
OCIErrorGet
OCISessionBegin

vcruntime140

strchr
__std_type_info_destroy_list
memset
_except_handler4_common
memcpy

api-ms-win-crt-string-l1-1-0

strncpy

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_cexit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

kernel32

GetCurrentThreadId
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess

Exports

Exports

get_module

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5109741a563da80b2d66fa73aefa240

Headers

DLL Characteristics

File Characteristics

Imports

php8ts

oci

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1024B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1024B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB