oraonsssl[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

oraonsssl.dll
Size

50KB
MD5

0900bfa04bf7f4a57fa132563b4b799f
SHA1

4e161c92335926dbc5b4b3ce3a76a02f0a33c2cc
SHA256

d5befca69b60367053fa4eebc5505cdd2595c15e75d50c74562d3c1feb7840a5
SHA512

81b24411c441e8304655d7e5bba0cd40afa944f1f8e7ab2d3e7b8018934bec61b4b5a5ca172740cc3afd5024cadaf231909688757388f0e5eff1d42db9536684
SSDEEP

768:vakn/XBORJiU92ruSuU17SXBukfv2FNf+p6JfYYzEAbTQLp4hTERH7GMziK2c:Ln/DD7SXUkX237JZwAbELp45otibc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
oraonsssl.dll

Files

oraonsssl.dll
.dll windows:5 windows x64 arch:x64

4e555fcdbd495c8b3f049e5390c8a5ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\ADE\aime_ons_12.2.1.3.0_16\opmn\bin\oraonsssl.dll.pdb

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
GetSystemTime
InitializeCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
CreateEventA
Sleep
WaitForSingleObject
ResetEvent
SetEvent
CloseHandle
GetLastError
CreateMutexA
ReleaseMutex
SetHandleInformation
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
DecodePointer
EncodePointer
GetSystemTimeAsFileTime

msvcr100

_localtime64
fprintf
vfprintf
fflush
sprintf
fopen
perror
strerror
_time64
_beginthread
_stricmp
_get_osfhandle
__iob_func
fputc
malloc
realloc
free
strncpy
memcpy
memset
strcmp
_malloc_crt
_initterm
_initterm_e
_encoded_null
_amsg_exit
__C_specific_handler
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_errno
fclose
atoi
isdigit
getenv
strchr
isspace
_endthread
_getpid
_fileno
_strdup

Exports

Exports

ons_ssl_api_clean
ons_ssl_api_init
ons_ssl_ciphers_validate
ons_ssl_conn_cipher_string
ons_ssl_conn_recv
ons_ssl_conn_send
ons_ssl_conn_send_comp
ons_ssl_conn_start
ons_ssl_conn_start_comp
ons_ssl_conn_stop
ons_ssl_conn_version_string
ons_ssl_context_create
ons_ssl_context_destroy
ons_ssl_status_string
ons_ssl_versions_validate

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e555fcdbd495c8b3f049e5390c8a5ed

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcr100

Exports

Exports

Sections

.text Size: 34KB - Virtual size: 34KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 2KB - Virtual size: 2KB

.pdata Size: 1KB - Virtual size: 1KB

.tls Size: 512B - Virtual size: 17B

.rsrc Size: 1024B - Virtual size: 760B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 34KB - Virtual size: 34KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 2KB - Virtual size: 2KB

.pdata
Size: 1KB - Virtual size: 1KB

.tls
Size: 512B - Virtual size: 17B

.rsrc
Size: 1024B - Virtual size: 760B

.reloc
Size: 1KB - Virtual size: 1KB