oraslax12[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

oraslax12.dll
Size

35KB
MD5

08f9320fef07870a0479ea729c73f799
SHA1

a92dd82a64faa8a3bc864a7743ce4af9577f67b4
SHA256

fa303db674f31716c92fb916fbcd009d5387e5fac0292d598b2b9b0a6464f7aa
SHA512

c65a4200e40ffc43a5a8c73cad862291b5961a0dee153c3aa1e180a2445dbd52d749642c788ff327e5383f08b82395002ba4866fc051b0b723f11cd657c1be55
SSDEEP

768:cHygHbyVY8IFgSZqLRJim4Kt57a4qWAkXqqiUO9dA+L7ueFJfY9READzQIUzcSQ5:S0gnZGMKtFan9WWFJkaADzQZrat

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
oraslax12.dll

Files

oraslax12.dll
.dll windows:5 windows x64 arch:x64

ebbc50efe6c7f051bdb2f18bcd3fead3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\ADE\aime_1\oracle\slax\bin\oraslax12.dll.pdb

Imports

oranls12

lmsagbf
lxsulen
lxsCatStr
lxscop
lxsCpStr

oracore12

lpmloadpkg
lsfiniu
lsfp
lpmdelete
lsfcln
lpminit

msvcr100

_malloc_crt
strcmp
_initterm_e
free
_encoded_null
_amsg_exit
__C_specific_handler
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
__crt_debugger_hook
memcpy
printf
_initterm

orauts

GetCurrentThreadId
Sleep

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DecodePointer
DisableThreadLibraryCalls
EncodePointer

Exports

Exports

pxngoto
pxnmove
pxnmstt
pxnrcln
pxnrcov
pxnspus

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ebbc50efe6c7f051bdb2f18bcd3fead3

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

oranls12

oracore12

msvcr100

orauts

kernel32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 3KB

.pdata Size: 512B - Virtual size: 480B

.rsrc Size: 1024B - Virtual size: 768B

.reloc Size: 1024B - Virtual size: 558B

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 3KB

.pdata
Size: 512B - Virtual size: 480B

.rsrc
Size: 1024B - Virtual size: 768B

.reloc
Size: 1024B - Virtual size: 558B