0fa12608df2d23eef6405d58ebc1eb6a

Sharing

Copy URL

Twitter E-mail

General

Target

0fa12608df2d23eef6405d58ebc1eb6a
Size

152KB
MD5

0fa12608df2d23eef6405d58ebc1eb6a
SHA1

670aa0bf7aae3634549e8d2f74884d930017dee7
SHA256

9074ce16718373a9cb164f692ac046a903806fea316ad1f624d114f9fe4eb14b
SHA512

ce971efc1a61e0b05ac46f9fa648c6e88a1ca315ede1eae144194648f0abda17329d257d581d9a4a4ea5ae995898fd835309145ae6785fd1f354420a0f8184bd
SSDEEP

3072:CRSycX2ZojC6Qv5v7bXvJkdRiqCX46DKnM/4U82SUTD6YInLb:Ce+lBkdEKn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fa12608df2d23eef6405d58ebc1eb6a

Files

0fa12608df2d23eef6405d58ebc1eb6a
.dll windows:5 windows x86 arch:x86

3ab0e8e8c67a4f3647f14f577a2fd280

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

raptor

raptor_free_namespace
raptor_xml_writer_cdata
raptor_xml_writer_cdata_counted
raptor_new_qname
raptor_xml_writer_raw
raptor_xml_writer_end_element
raptor_free_xml_element
raptor_xml_writer_empty_element
raptor_xml_element_set_attributes
raptor_new_qname_from_namespace_local_name
raptor_alloc_memory
raptor_xml_writer_raw_counted
raptor_xml_writer_start_element
raptor_new_xml_element_from_namespace_local_name
raptor_new_namespace
raptor_new_xml_writer
raptor_xml_element_get_language
raptor_qname_get_value
raptor_qname_get_counted_value
raptor_xml_element_get_attributes
raptor_free_xml_writer
raptor_qname_get_local_name
raptor_xml_element_get_name
raptor_sax2_parse_start
raptor_free_sax2
raptor_sax2_parse_chunk
raptor_iostream_read_bytes
raptor_iostream_read_eof
raptor_sax2_set_end_element_handler
raptor_sax2_set_characters_handler
raptor_sax2_set_start_element_handler
raptor_new_sax2
raptor_error_handlers_init
raptor_xmlschema_datatypes_namespace_uri
raptor_xml_name_check
raptor_new_uri_relative_to_base
raptor_owl_namespace_uri
raptor_rdf_schema_namespace_uri
raptor_sequence_print_uri
raptor_sequence_shift
raptor_namespaces_find_namespace
raptor_new_parser
raptor_set_statement_handler
raptor_set_error_handler
raptor_set_generate_id_handler
raptor_parse_uri
raptor_free_parser
raptor_format_locator
raptor_xml_literal_datatype_uri_string
raptor_rdf_namespace_uri_len
raptor_uri_filename_to_uri_string
raptor_new_iostream_to_string
raptor_free_iostream
raptor_new_uri_for_rdf_concept
raptor_uri_get_handler
raptor_new_namespaces
raptor_new_namespace_from_uri
raptor_namespaces_start_namespace
raptor_iostream_write_uri
raptor_iostream_write_bytes
raptor_iostream_write_decimal
raptor_namespaces_qname_from_uri
raptor_qname_get_namespace
raptor_namespace_get_prefix
raptor_iostream_write_qname
raptor_free_qname
raptor_uri_to_relative_counted_uri_string
raptor_uri_as_counted_string
raptor_iostream_write_string_ntriples
raptor_free_memory
raptor_iostream_write_counted_string
raptor_iostream_write_byte
raptor_iostream_write_string
raptor_namespaces_end_for_depth
raptor_namespaces_start_namespace_full
raptor_free_namespaces
raptor_qname_string_to_uri
raptor_uri_compare
raptor_uri_equals
raptor_print_ntriples_string
raptor_init
raptor_rdf_namespace_uri
raptor_finish
raptor_utf8_to_unicode_char
raptor_unicode_char_to_utf8
raptor_vsnprintf
raptor_print_locator
raptor_new_uri
raptor_uri_print
raptor_new_uri_from_uri_local_name
raptor_sequence_print
raptor_uri_as_string
raptor_free_uri
raptor_uri_copy
raptor_sequence_unshift
raptor_sequence_join
raptor_free_sequence
raptor_sequence_set_at
raptor_sequence_sort
raptor_sequence_pop
raptor_new_sequence
raptor_sequence_push
raptor_sequence_size
raptor_xml_element_get_attributes_count
raptor_sequence_get_at

msvcr90

_except_handler4_common
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
_errno
realloc
printf
isalpha
memmove
isdigit
atoi
_stricmp
_isnan
strtol
sprintf
sscanf
strrchr
vfprintf
strncmp
memcpy
tolower
abort
fputc
fputs
memset
calloc
__iob_func
fprintf
fwrite
strchr
strtod
strncpy
strtoul
_snprintf
malloc
free
_onexit

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Exports

Exports

GetVersionInfo
rasqal_alloc_memory
rasqal_calloc_memory
rasqal_copyright_string
rasqal_data_graph_print
rasqal_expression_evaluate
rasqal_expression_print
rasqal_expression_print_op
rasqal_expression_visit
rasqal_feature_from_uri
rasqal_feature_value_type
rasqal_features_enumerate
rasqal_free_data_graph
rasqal_free_expression
rasqal_free_literal
rasqal_free_memory
rasqal_free_prefix
rasqal_free_query
rasqal_free_query_results
rasqal_free_query_results_formatter
rasqal_free_triple
rasqal_free_variable
rasqal_free_world
rasqal_free_xsd_decimal
rasqal_get_feature_count
rasqal_graph_pattern_add_constraint
rasqal_graph_pattern_add_sub_graph_pattern
rasqal_graph_pattern_get_constraint
rasqal_graph_pattern_get_constraint_sequence
rasqal_graph_pattern_get_index
rasqal_graph_pattern_get_operator
rasqal_graph_pattern_get_sub_graph_pattern
rasqal_graph_pattern_get_sub_graph_pattern_sequence
rasqal_graph_pattern_get_triple
rasqal_graph_pattern_operator_as_string
rasqal_graph_pattern_print
rasqal_graph_pattern_visit
rasqal_home_url_string
rasqal_language_name_check
rasqal_languages_enumerate
rasqal_license_string
rasqal_literal_as_node
rasqal_literal_as_string
rasqal_literal_as_string_flags
rasqal_literal_as_variable
rasqal_literal_compare
rasqal_literal_datatype
rasqal_literal_equals
rasqal_literal_print
rasqal_literal_print_type
rasqal_literal_value
rasqal_new_0op_expression
rasqal_new_1op_expression
rasqal_new_2op_expression
rasqal_new_3op_expression
rasqal_new_boolean_literal
rasqal_new_cast_expression
rasqal_new_data_graph
rasqal_new_decimal_literal
rasqal_new_decimal_literal_from_decimal
rasqal_new_double_literal
rasqal_new_expression_from_expression
rasqal_new_float_literal
rasqal_new_function_expression
rasqal_new_integer_literal
rasqal_new_literal_expression
rasqal_new_literal_from_literal
rasqal_new_pattern_literal
rasqal_new_prefix
rasqal_new_query
rasqal_new_query_results_formatter
rasqal_new_query_results_formatter_by_mime_type
rasqal_new_simple_literal
rasqal_new_string_literal
rasqal_new_string_op_expression
rasqal_new_triple
rasqal_new_triple_from_triple
rasqal_new_typed_literal
rasqal_new_uri_literal
rasqal_new_variable
rasqal_new_variable_from_variable
rasqal_new_variable_literal
rasqal_new_variable_typed
rasqal_new_world
rasqal_new_xsd_decimal
rasqal_prefix_print
rasqal_query_add_data_graph
rasqal_query_add_prefix
rasqal_query_add_variable
rasqal_query_escape_counted_string
rasqal_query_execute
rasqal_query_get_all_variable_sequence
rasqal_query_get_anonymous_variable_sequence
rasqal_query_get_bound_variable_sequence
rasqal_query_get_construct_triple
rasqal_query_get_construct_triples_sequence
rasqal_query_get_data_graph
rasqal_query_get_data_graph_sequence
rasqal_query_get_distinct
rasqal_query_get_explain
rasqal_query_get_feature
rasqal_query_get_feature_string
rasqal_query_get_graph_pattern
rasqal_query_get_graph_pattern_sequence
rasqal_query_get_group_condition
rasqal_query_get_group_conditions_sequence
rasqal_query_get_label
rasqal_query_get_limit
rasqal_query_get_name
rasqal_query_get_offset
rasqal_query_get_order_condition
rasqal_query_get_order_conditions_sequence
rasqal_query_get_prefix
rasqal_query_get_prefix_sequence
rasqal_query_get_query_graph_pattern
rasqal_query_get_triple
rasqal_query_get_triple_sequence
rasqal_query_get_user_data
rasqal_query_get_variable
rasqal_query_get_verb
rasqal_query_get_wildcard
rasqal_query_graph_pattern_visit
rasqal_query_has_variable
rasqal_query_iostream_write_escaped_counted_string
rasqal_query_prepare
rasqal_query_print
rasqal_query_results_finished
rasqal_query_results_formats_check
rasqal_query_results_formats_enumerate
rasqal_query_results_formatter_get_mime_type
rasqal_query_results_formatter_read
rasqal_query_results_formatter_write
rasqal_query_results_get_binding_name
rasqal_query_results_get_binding_value
rasqal_query_results_get_binding_value_by_name
rasqal_query_results_get_bindings
rasqal_query_results_get_bindings_count
rasqal_query_results_get_boolean
rasqal_query_results_get_count
rasqal_query_results_get_triple
rasqal_query_results_is_bindings
rasqal_query_results_is_boolean
rasqal_query_results_is_graph
rasqal_query_results_is_syntax
rasqal_query_results_next
rasqal_query_results_next_triple
rasqal_query_results_read
rasqal_query_results_write
rasqal_query_set_default_generate_bnodeid_parameters
rasqal_query_set_distinct
rasqal_query_set_error_handler
rasqal_query_set_explain
rasqal_query_set_fatal_error_handler
rasqal_query_set_feature
rasqal_query_set_feature_string
rasqal_query_set_generate_bnodeid_handler
rasqal_query_set_limit
rasqal_query_set_offset
rasqal_query_set_user_data
rasqal_query_set_variable
rasqal_query_set_warning_handler
rasqal_query_verb_as_string
rasqal_query_write
rasqal_set_triples_source_factory
rasqal_short_copyright_string
rasqal_triple_get_origin
rasqal_triple_print
rasqal_triple_set_origin
rasqal_variable_print
rasqal_variable_set_value
rasqal_version_decimal
rasqal_version_major
rasqal_version_minor
rasqal_version_release
rasqal_version_string
rasqal_xsd_decimal_add
rasqal_xsd_decimal_as_counted_string
rasqal_xsd_decimal_as_string
rasqal_xsd_decimal_compare
rasqal_xsd_decimal_divide
rasqal_xsd_decimal_equals
rasqal_xsd_decimal_get_double
rasqal_xsd_decimal_is_zero
rasqal_xsd_decimal_multiply
rasqal_xsd_decimal_negate
rasqal_xsd_decimal_print
rasqal_xsd_decimal_set_double
rasqal_xsd_decimal_set_long
rasqal_xsd_decimal_set_string
rasqal_xsd_decimal_subtract

Sections

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ab0e8e8c67a4f3647f14f577a2fd280

Headers

DLL Characteristics

File Characteristics

Imports

raptor

msvcr90

kernel32

Exports

Exports

Sections

.text Size: 83KB - Virtual size: 82KB

.rdata Size: 41KB - Virtual size: 41KB

.data Size: 18KB - Virtual size: 18KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 83KB - Virtual size: 82KB

.rdata
Size: 41KB - Virtual size: 41KB

.data
Size: 18KB - Virtual size: 18KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 6KB