86246373b14f3c782138778ae8eeb4f1e82c29d126cf52ac9a90f6f2fb0d0e8e

Sharing

Copy URL Twitter E-mail

General

Target

86246373b14f3c782138778ae8eeb4f1e82c29d126cf52ac9a90f6f2fb0d0e8e
Size

44KB
MD5

b24e696dc782a6eab6f813ed77c01f1a
SHA1

08eb19eb87935d3ee1f7f6fed347bf5d9084431d
SHA256

86246373b14f3c782138778ae8eeb4f1e82c29d126cf52ac9a90f6f2fb0d0e8e
SHA512

e58433d73c4ff72b2d46b10688089d29b9f43a1492f7de44f250317f7d3fa9b03938e3c3dd7655fd9592ec446c2bfb2b7d9d1f2e6120e35331bf4838383a70e6
SSDEEP

768:lbcqF44PysOa+DyA6aC8KTYjsn4CEshChHBZpRMSRuqusuJwso5luPuyELESc1+g:PfO28KaCuBZLZJu6O+cQmsNYAVfA+DZK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86246373b14f3c782138778ae8eeb4f1e82c29d126cf52ac9a90f6f2fb0d0e8e

Files

86246373b14f3c782138778ae8eeb4f1e82c29d126cf52ac9a90f6f2fb0d0e8e
.dll windows x86

3eae1ac27bdb8327d9159895354cab65

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

php8ts

php_info_print_table_start
zend_ce_exception
zend_spprintf
_emalloc@@4
zend_object_std_init@@8
_efree@@4
zend_throw_error
php_file_le_stream
php_info_print_table_header
zend_hash_index_update@@12
convert_to_double@@4
zend_llist_init
php_file_le_pstream
std_object_handlers
zend_vspprintf
_php_stream_copy_to_mem
_zend_handle_numeric_str_ex@@12
empty_fcall_info
_zend_hash_init@@16
zend_wrong_parameters_count_error@@8
convert_to_long@@4
zend_register_internal_class_ex
zend_wrong_parameters_none_error@@0
zend_wrong_parameter_error@@20
zend_declare_class_constant_ex
display_ini_entries
php_error_docref
zend_unregister_ini_entries_ex
zend_llist_add_element
object_properties_init
add_assoc_long_ex
zend_parse_arg_bool_slow@@12
zend_fetch_resource2_ex
zend_call_function
php_check_open_basedir
_estrdup@@4
zend_hash_update@@12
_safe_emalloc@@12
sapi_module
_zend_new_array@@4
expand_filepath
zend_empty_array
tsrm_get_ls_cache
zend_parse_parameters
zend_register_long_constant
__zend_malloc
virtual_realpath
zend_hash_index_del@@8
zend_ini_boolean_displayer_cb
executor_globals_offset
zend_string_init_interned
zend_llist_clean
zend_hash_destroy@@4
zend_throw_exception
zval_ptr_dtor
zend_parse_arg_long_slow@@12
zend_release_fcall_info_cache
php_info_print_table_end
core_globals_offset
empty_fcall_info_cache
zend_llist_del_element
add_assoc_zval_ex
OnUpdateString
php_info_print_table_row
zend_object_std_dtor
_php_stream_alloc
zend_register_ini_entries_ex
_ecalloc@@8
add_assoc_string_ex
zval_get_string_func@@4
zend_parse_arg_str_or_long_slow@@16
object_init_ex
zend_fcall_info_args_clear
zend_empty_string
OnUpdateBool
zend_throw_exception_ex
zend_fcall_info_init
zval_try_get_string_func@@4

libsqlite3

sqlite3_libversion_number
sqlite3_extended_result_codes
sqlite3_reset
sqlite3_clear_bindings
sqlite3_threadsafe
sqlite3_column_double
sqlite3_value_double
sqlite3_backup_step
sqlite3_bind_parameter_count
sqlite3_errmsg
sqlite3_column_blob
sqlite3_bind_int
sqlite3_step
sqlite3_blob_open
sqlite3_enable_load_extension
sqlite3_column_name
sqlite3_value_bytes
sqlite3_libversion
sqlite3_errcode
sqlite3_result_int
sqlite3_db_config
sqlite3_load_extension
sqlite3_column_bytes
sqlite3_bind_null
sqlite3_errstr
sqlite3_create_function
sqlite3_column_int64
sqlite3_mprintf
sqlite3_exec
sqlite3_expanded_sql
sqlite3_value_int
sqlite3_value_type
sqlite3_result_text
sqlite3_data_count
sqlite3_blob_bytes
sqlite3_result_null
sqlite3_close
sqlite3_prepare_v2
sqlite3_extended_errcode
sqlite3_backup_finish
sqlite3_aggregate_context
sqlite3_bind_double
sqlite3_create_collation
sqlite3_set_authorizer
sqlite3_sql
sqlite3_blob_close
sqlite3_column_text
sqlite3_last_insert_rowid
sqlite3_backup_init
sqlite3_free
sqlite3_changes
sqlite3_result_error
sqlite3_blob_write
sqlite3_finalize
sqlite3_bind_blob
sqlite3_column_count
sqlite3_bind_parameter_index
sqlite3_column_type
sqlite3_user_data
sqlite3_busy_timeout
sqlite3_result_double
sqlite3_db_handle
sqlite3_blob_read
sqlite3_value_text
sqlite3_bind_text
sqlite3_stmt_readonly
sqlite3_open_v2

vcruntime140

memmove
memcpy
memset
__std_type_info_destroy_list
_except_handler4_common

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initialize_narrow_environment
_execute_onexit_table
_seh_filter_dll
_initterm_e
_initterm
_configure_narrow_argv
_cexit

kernel32

GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetCurrentProcess
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
UnhandledExceptionFilter
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess

Exports

Exports

get_module

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3eae1ac27bdb8327d9159895354cab65

Headers

DLL Characteristics

File Characteristics

Imports

php8ts

libsqlite3

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 2KB