fb687d0648f17aa99bf693603c26d15c1b8b33437adc742fe8cbed2c465e6072

Sharing

Copy URL Twitter E-mail

General

Target

fb687d0648f17aa99bf693603c26d15c1b8b33437adc742fe8cbed2c465e6072
Size

45KB
MD5

d28f731f1c80f04437985206ea5dbc1d
SHA1

e0cbacb7a07ec8b2707476b734ca0aca37d2f60c
SHA256

fb687d0648f17aa99bf693603c26d15c1b8b33437adc742fe8cbed2c465e6072
SHA512

79009fcf94fc79c3609dfd618d6b40a5ad51fda6b6fd4a3a268c0774b7ff46567c9f7d51759f8cff3742fd89aecdb89ab7a10561f8619514d3918114d0e2521b
SSDEEP

768:q7uQ4fX/Wv0lfCGCmB4EO9yN1EjvPijZ+kU:pT/WwxfBa9yNij8+kU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb687d0648f17aa99bf693603c26d15c1b8b33437adc742fe8cbed2c465e6072

Files

fb687d0648f17aa99bf693603c26d15c1b8b33437adc742fe8cbed2c465e6072
.dll windows x86

bbc2060fe2a611b1b0c10b6d7164e684

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

php8ts

add_next_index_string
zend_known_strings
php_info_print_table_start
_php_stream_tell
zend_object_std_init@@8
zend_throw_error
php_file_le_stream
zend_fetch_resource2
php_file_le_pstream
std_object_handlers
zend_register_internal_class_ex
object_properties_init
zend_argument_type_error
zend_fetch_resource2_ex
zend_try_assign_typed_ref_str
zend_hash_str_find@@12
virtual_unlink
zend_hash_next_index_insert@@8
zend_argument_value_error
tsrm_get_ls_cache
zend_parse_parameters
zend_register_long_constant
_php_stream_open_wrapper_ex
compiler_globals_offset
zend_string_init_interned
zend_throw_exception
zval_ptr_dtor
zend_zval_type_name
php_info_print_table_end
php_info_print_table_row
zend_object_std_dtor
object_init_ex
zend_ce_value_error
zend_add_attribute
ap_php_snprintf
zend_spprintf
_emalloc@@4
_efree@@4
php_socket_strerror
php_any_addr
php_network_connect_socket_to_host
_php_stream_getc
php_sockaddr_size
_php_stream_eof
php_network_connect_socket
zend_hash_str_update@@16
php_error_docref
_estrndup@@8
php_poll2
php_gmtime_r
_php_stream_seek
_php_stream_write
_estrdup@@4
ap_php_slprintf
_safe_emalloc@@12
_zend_new_array@@4
_php_stream_putc
_php_stream_free
_php_stream_fopen_tmpfile
_ecalloc@@8

libcrypto-3

ERR_clear_error
ERR_get_error
ERR_error_string_n

libssl-3

SSL_get_session
SSL_set_session
SSL_connect
SSL_new
SSL_CTX_free
SSL_CTX_ctrl
SSL_set_fd
SSL_copy_session_id
SSL_CTX_new
SSL_write
TLS_client_method
SSL_read
SSL_shutdown
SSL_get_error
SSL_get_SSL_CTX
SSL_free
SSL_CTX_set_options

ws2_32

closesocket
bind
accept
listen
getpeername
getsockname
send
socket
ntohs
recv
htons
inet_ntop

vcruntime140

memcpy
memchr
memmove
strrchr
_except_handler4_common
memset
__std_type_info_destroy_list
strchr

api-ms-win-crt-string-l1-1-0

strpbrk
isdigit

api-ms-win-crt-convert-l1-1-0

strtoul
atol

api-ms-win-crt-runtime-l1-1-0

_set_errno
_errno
strerror
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_cexit
_execute_onexit_table

api-ms-win-crt-time-l1-1-0

_time32
_mktime32

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf

kernel32

IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
UnhandledExceptionFilter

Exports

Exports

get_module

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bbc2060fe2a611b1b0c10b6d7164e684

Headers

DLL Characteristics

File Characteristics

Imports

php8ts

libcrypto-3

libssl-3

ws2_32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-stdio-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 2KB