libeay32[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

libeay32.dll
Size

1.9MB
MD5

876a839023b8f962a72d295da7495734
SHA1

62a7728679bc18784b1fbf1d013f7cece18cbec9
SHA256

a757d773da406411fb977761f6e56f016d48d224aedaf3d875ed4d4a9ede6158
SHA512

e1b23a2f5ec0100ff874ca075bbd0f90e9065a90fec66861f99df603d7aaa9db8e8ec326710fdc11ad41d01befe4ea3077136127acf613614d0d12ff23bec6c1
SSDEEP

24576:OFZD9URlmDrgBrhEci8XhP3YLd44RS6+FNbqUzUxVvqKGTZnIzudBDFPjQAr10Fu:+ZeLrXFcL0YF7pvtHkfH

Score

1^/10

Malware Config

Signatures

Files

libeay32.dll
.exe windows:5 windows x86 arch:x86

ff2f78d57ebf501baf00007219fa3800

Code Sign

64:33:51:d3:c7:38:9f:08
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

24/06/2016, 20:44

Not After

24/06/2031, 20:44

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:2c:e4:04:ae:f3:44:eb:b3:b8:76:54:f2:c9:84:22
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

14/03/2024, 20:30

Not After

14/03/2025, 20:30

Subject

CN=Max Biotech Limited,O=Max Biotech Limited,L=Caterham,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

5a:5a:ac:e8:1a:35:6e:b4:62:86:8d:57:7d:e0:3d:c7
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

19/02/2024, 16:18

Not After

16/02/2034, 16:18

Subject

CN=SSL.com Timestamping Unit 2024 E1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8b:ac:62:bb:5d:c7:9f:75:ef:8b:f4:62:81:63:01:f7:d1:17:53:6f:90:52:7d:48:0b:f3:69:71:46:eb:b0:0d
Signer

Actual PE Digest

8b:ac:62:bb:5d:c7:9f:75:ef:8b:f4:62:81:63:01:f7:d1:17:53:6f:90:52:7d:48:0b:f3:69:71:46:eb:b0:0d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_ReplaceIcon
ImageList_Remove
InitCommonControlsEx
ImageList_Create

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCPInfo
GetCurrentDirectoryW
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDriveTypeW
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleW
GetOEMCP
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemInfo
GetTempFileNameW
GetTempPathW
GetTimeFormatW
GetUserDefaultLCID
GetVersionExW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
lstrcmpiW
lstrcmpW
lstrlenA
lstrlenW
GetACP
MulDiv
MultiByteToWideChar
OpenFileMappingW
OpenProcess
OutputDebugStringW
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReadProcessMemory
ResetEvent
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetStringTypeA
InterlockedIncrement
InterlockedDecrement
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
SetHandleCount
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
RtlUnwind
FreeLibrary
FreeEnvironmentStringsW
FormatMessageW
FlushInstructionCache
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
ExitProcess
EnumSystemLocalesW
DeleteCriticalSection
DebugBreak
CreateThread
CreateProcessW
CreateMutexW
CreateFileW
CreateFileMappingW
CreateEventW
CreateDirectoryW
CopyFileW
CompareStringW
CloseHandle
GetSystemTimeAsFileTime
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
GetDriveTypeA
OpenMutexA
CreateMutexA
GetLocalTime
GetTimeZoneInformation
LCMapStringA
MapViewOfFile

user32

LoadMenuW
LoadStringW
MapWindowPoints
MessageBoxW
MoveWindow
OffsetRect
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RedrawWindow
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageW
SetCapture
SetClipboardData
SetCursor
SetFocus
SetMenuItemInfoW
SetRectEmpty
SetScrollInfo
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
UnregisterClassW
UpdateWindow
IsWindowVisible
IsWindowEnabled
IsDialogMessageW
LoadImageW
IntersectRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowLongW
GetSystemMetrics
GetSysColorBrush
GetSubMenu
GetScrollInfo
GetParent
GetMessageW
GetMenu
GetKeyState
GetIconInfo
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetCapture
GetActiveWindow
FlashWindow
FillRect
EnumWindows
EndPaint
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawTextExA
DrawIcon
LoadIconW
LoadCursorW
InvalidateRect
KillTimer
SetForegroundWindow
SendMessageA
FindWindowA
BeginPaint
CallWindowProcW
CharNextW
CharUpperW
DrawFocusRect
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyIcon
DeleteMenu
DefWindowProcW
CreateWindowExW
CreateDialogParamW
CopyRect
CloseClipboard
CheckMenuRadioItem
DestroyMenu

gdi32

GetStockObject
Polygon
RealizePalette
SelectClipRgn
GetObjectW
SelectPalette
SetBkColor
SetBkMode
SetDIBits
SetStretchBltMode
SetTextColor
SetViewportOrgEx
TextOutW
GetDIBits
GetDIBColorTable
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePen
CreatePalette
CreateHalftonePalette
CreateFontW
CreateFontIndirectW
CreateDIBSection
SelectObject
CreateDCW

advapi32

OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
LookupPrivilegeValueW

shell32

Shell_NotifyIconW
ExtractIconW
ShellExecuteW

ole32

CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CoInitialize
CoTaskMemAlloc

Sections

.text
Size: 756KB - Virtual size: 753KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vcp1208
Size: 994KB - Virtual size: 996KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ff2f78d57ebf501baf00007219fa3800

Code Sign

64:33:51:d3:c7:38:9f:08Certificate

Extended Key Usages

Key Usages

4e:2c:e4:04:ae:f3:44:eb:b3:b8:76:54:f2:c9:84:22Certificate

Extended Key Usages

Key Usages

5a:5a:ac:e8:1a:35:6e:b4:62:86:8d:57:7d:e0:3d:c7Certificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

8b:ac:62:bb:5d:c7:9f:75:ef:8b:f4:62:81:63:01:f7:d1:17:53:6f:90:52:7d:48:0b:f3:69:71:46:eb:b0:0dSigner

Headers

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 756KB - Virtual size: 753KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 208KB - Virtual size: 208KB

.vcp1208 Size: 994KB - Virtual size: 996KB

64:33:51:d3:c7:38:9f:08
Certificate

4e:2c:e4:04:ae:f3:44:eb:b3:b8:76:54:f2:c9:84:22
Certificate

5a:5a:ac:e8:1a:35:6e:b4:62:86:8d:57:7d:e0:3d:c7
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

8b:ac:62:bb:5d:c7:9f:75:ef:8b:f4:62:81:63:01:f7:d1:17:53:6f:90:52:7d:48:0b:f3:69:71:46:eb:b0:0d
Signer

.text
Size: 756KB - Virtual size: 753KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 208KB - Virtual size: 208KB

.vcp1208
Size: 994KB - Virtual size: 996KB