get_module
Static task
static1
Behavioral task
behavioral1
Sample
82b235743848b633592c2b4eb5b825cdd33c4b647dce1fa35c7aac311228bb5e.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
82b235743848b633592c2b4eb5b825cdd33c4b647dce1fa35c7aac311228bb5e.dll
Resource
win10v2004-20230703-en
General
-
Target
82b235743848b633592c2b4eb5b825cdd33c4b647dce1fa35c7aac311228bb5e
-
Size
203KB
-
MD5
d65a9f58ee0543f74134f37088f4da2c
-
SHA1
e6168a91d231bdc2b6cd94835eeca980dc243fa1
-
SHA256
82b235743848b633592c2b4eb5b825cdd33c4b647dce1fa35c7aac311228bb5e
-
SHA512
294f2ba9fed758c7406b87bb7d9a2dae52cd1852c6609c8527636458596962a6476cd6360af0dce7085b7aebc5aac5dbc7ddeae99a866af235d9627b0f6689fb
-
SSDEEP
6144:HQLjNSiB+Cuq1/8GHCqPRN8RdG2OXBHJbqK4:HAB+Cuqt8MZNy4VJbH4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82b235743848b633592c2b4eb5b825cdd33c4b647dce1fa35c7aac311228bb5e
Files
-
82b235743848b633592c2b4eb5b825cdd33c4b647dce1fa35c7aac311228bb5e.dll windows x86
f0fbba6366bbbbe3e9507b6e3392fd32
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
php8ts
zend_type_error
add_assoc_stringl_ex
zend_wrong_parameters_count_error@@8
zend_hash_str_update@@16
std_object_handlers
get_active_function_name
zend_str_tolower@@8
zend_try_assign_typed_ref_long
zend_hash_index_update@@12
convert_to_long@@4
zend_hash_get_current_key_ex@@16
zend_throw_error
_efree@@4
zend_object_std_init@@8
zend_array_destroy@@4
_emalloc@@4
php_info_print_table_start
zend_known_strings
zend_try_assign_typed_ref_stringl
php_info_print_table_row
ap_php_snprintf
add_assoc_zval_ex
zend_is_true@@4
zend_add_attribute
zend_register_internal_class_ex
zend_objects_not_comparable
add_next_index_bool
display_link_numbers
php_info_print_table_end
zend_zval_type_name
zend_parse_arg_long_slow@@12
zend_try_assign_typed_ref_string
zval_ptr_dtor
OnUpdateLong
zend_try_assign_typed_ref_arr
zend_string_init_interned
executor_globals_offset
compiler_globals_offset
zend_try_assign_typed_ref_empty_string
zend_register_long_constant
zend_parse_parameters
tsrm_get_ls_cache
zend_hash_get_current_data_ex@@8
_zend_new_array@@4
add_index_string
zend_argument_value_error
_safe_emalloc@@12
instanceof_function_slow@@8
zend_hash_next_index_insert@@8
zend_array_dup@@4
add_index_stringl
add_next_index_stringl
_convert_to_string@@4
zend_value_error
zend_hash_str_find@@12
zval_get_long_func@@8
zend_argument_type_error
zend_register_string_constant
add_assoc_long_ex
object_properties_init
zend_hash_move_forward_ex@@8
zend_unregister_ini_entries_ex
_estrndup@@8
php_error_docref
display_ini_entries
zend_wrong_parameter_error@@20
zend_hash_internal_pointer_reset_ex@@8
zend_hash_get_current_key_type_ex@@8
zend_object_std_dtor
add_next_index_string
zend_register_ini_entries_ex
add_assoc_string_ex
zend_parse_arg_str_slow@@12
zval_get_string_func@@4
object_init_ex
zend_hash_index_find@@8
add_assoc_null_ex
zend_empty_string
add_assoc_bool_ex
wsock32
WSAGetLastError
WSAStartup
WSACleanup
__WSAFDIsSet
send
recv
inet_ntoa
gethostname
gethostbyname
gethostbyaddr
socket
shutdown
setsockopt
select
ioctlsocket
htonl
getsockopt
getpeername
connect
closesocket
WSASetLastError
libsasl
sasl_version
sasl_dispose
sasl_errstring
sasl_errdetail
sasl_getprop
sasl_setprop
sasl_client_init
sasl_client_new
sasl_client_start
sasl_client_step
sasl_global_listmech
sasl_encode
sasl_decode
kernel32
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
ws2_32
freeaddrinfo
getaddrinfo
inet_ntop
inet_pton
vcruntime140
__std_type_info_destroy_list
strrchr
memcpy
memset
memchr
strchr
memmove
_except_handler4_common
api-ms-win-crt-heap-l1-1-0
calloc
malloc
realloc
free
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_register_onexit_function
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
__sys_nerr
__sys_errlist
_cexit
_crt_atexit
_initialize_onexit_table
_errno
_wassert
_initialize_narrow_environment
api-ms-win-crt-stdio-l1-1-0
_write
fopen
fgets
fclose
_read
_close
fputs
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vfprintf
fflush
api-ms-win-crt-string-l1-1-0
isprint
isgraph
strncpy
_strnicmp
isalnum
_stricmp
strncmp
isspace
isdigit
api-ms-win-crt-convert-l1-1-0
strtol
atoi
strtoul
api-ms-win-crt-time-l1-1-0
_ctime64
_time64
api-ms-win-crt-environment-l1-1-0
getenv
libcrypto-3
ASN1_STRING_length
OBJ_cmp
X509_STORE_set_flags
X509_STORE_CTX_get_error
X509_STORE_CTX_get_error_depth
X509_STORE_CTX_get_current_cert
X509_verify_cert_error_string
X509_free
X509_NAME_oneline
X509_get_issuer_name
X509_get_subject_name
OPENSSL_sk_num
OPENSSL_sk_value
X509_NAME_get_entry
X509_NAME_ENTRY_get_object
X509_NAME_ENTRY_get_data
X509_NAME_get0_der
X509_get_ext_by_NID
CRYPTO_free
OBJ_nid2obj
BIO_set_flags
BIO_clear_flags
RAND_status
RAND_file_name
RAND_write_file
RAND_load_file
ERR_error_string_n
ERR_peek_error
ERR_get_error_line
BIO_new_file
BIO_new
BIO_free
BIO_set_data
X509V3_EXT_d2i
BIO_get_data
BIO_set_init
X509V3_add_standard_extensions
BIO_meth_set_destroy
BIO_meth_new
BIO_meth_free
BIO_meth_set_write
ASN1_STRING_get0_data
BIO_meth_set_read
BIO_meth_set_puts
BIO_meth_set_gets
GENERAL_NAMES_free
PEM_read_bio_DHparams
BIO_meth_set_ctrl
BIO_meth_set_create
X509_get_ext
X509_NAME_entry_count
libssl-3
SSL_get1_peer_certificate
SSL_state_string_long
SSL_load_client_CA_file
SSL_CTX_use_certificate_file
SSL_CTX_use_PrivateKey_file
SSL_get_verify_result
SSL_set_bio
SSL_pending
SSL_CIPHER_get_bits
SSL_get_current_cipher
SSL_CTX_get_cert_store
SSL_CTX_free
SSL_CTX_up_ref
SSL_CTX_new
SSL_CTX_set_cipher_list
SSL_CTX_set_info_callback
SSL_CTX_set_options
SSL_CTX_set_verify
SSL_CTX_set_session_id_context
SSL_new
SSL_free
SSL_accept
SSL_connect
SSL_read
SSL_write
SSL_CTX_ctrl
SSL_get_error
TLS_method
SSL_shutdown
SSL_alert_type_string_long
SSL_alert_desc_string_long
SSL_CTX_set_client_CA_list
SSL_get_certificate
SSL_CTX_set_default_verify_paths
SSL_CTX_load_verify_locations
OPENSSL_init_ssl
Exports
Exports
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ