mosquitto[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

mosquitto.dll
Size

43KB
MD5

647100478fcb407db6f16beeb84c15e1
SHA1

5ea35eaa68a9e0abf3ab7374032d76e114ce2860
SHA256

08e448eccafe4f96f1d6d9496c89f986579f77d128ef9db0c2e2284c482efa47
SHA512

bb679cafa2810bf8fcc62fb379b164aff155b09144a0180da58e2c43427b4b925c54688226af671cdea78507f5dd09ad6f8f141ae02b6a08df1447a34a44cc83
SSDEEP

768:II0ax2EkGcVFSyWkNtkLInGHna6BnHyeGxEDLmvXkb282Pe:lrxI8yNnf838Sm/kb282Pe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mosquitto.dll

Files

mosquitto.dll
.dll windows:6 windows x86 arch:x86

17821166c0b182edec6a6aa8e5774c3e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExpandEnvironmentStringsA
GetTickCount64
GetTickCount
LocalFree
CreateFileA
Sleep
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

advapi32

SetEntriesInAclA
GetUserNameA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
BuildExplicitAccessWithNameA

libssl-1_1

SSL_connect
SSL_read
SSL_write
SSL_CTX_ctrl
SSL_get_error
TLSv1_client_method
TLSv1_2_client_method
SSL_shutdown
SSL_CTX_load_verify_locations
SSL_set_ex_data
SSL_get_ex_data
SSL_new
OPENSSL_init_ssl
SSL_get_ex_data_X509_STORE_CTX_idx
SSL_CTX_check_private_key
SSL_CTX_use_PrivateKey_file
SSL_set_bio
SSL_CTX_new
SSL_CTX_set_cipher_list
SSL_CTX_set_psk_client_callback
SSL_CTX_set_options
SSL_free
SSL_pending
SSL_CTX_free
TLSv1_1_client_method
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_verify
SSL_CTX_use_certificate_chain_file

libcrypto-1_1

CRYPTO_get_ex_new_index
OPENSSL_init_crypto
BIO_new_socket
ERR_get_error
ERR_clear_error
ERR_error_string
ASN1_STRING_data
OPENSSL_sk_num
OPENSSL_sk_value
OPENSSL_sk_pop_free
BN_hex2bn
BN_free
BN_bn2bin
BN_num_bits
GENERAL_NAME_free
X509_get_ext_d2i
X509_NAME_get_text_by_NID
X509_get_subject_name
X509_STORE_CTX_get_current_cert
X509_STORE_CTX_get_error_depth
X509_STORE_CTX_get_ex_data
CONF_modules_unload

pthreadvc2

pthread_create
pthread_mutex_destroy
pthread_mutex_init
pthread_cancel
pthread_self
pthread_join
pthread_equal
pthread_mutex_unlock
pthread_mutex_lock

ws2_32

send
inet_pton
freeaddrinfo
getaddrinfo
WSACleanup
WSAStartup
socket
listen
htons
htonl
getsockname
ioctlsocket
connect
bind
accept
WSAGetLastError
select
recv
closesocket
__WSAFDIsSet

vcruntime140

_except_handler4_common
__std_type_info_destroy_list
memset
memcpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
_open_osfhandle
fopen
_close
fclose

api-ms-win-crt-heap-l1-1-0

realloc
calloc
free
malloc

api-ms-win-crt-runtime-l1-1-0

_errno
_crt_atexit
strerror
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_execute_onexit_table
_initialize_onexit_table
_register_onexit_function
_cexit

api-ms-win-crt-string-l1-1-0

_stricmp
strncmp
strspn
_strdup

api-ms-win-crt-utility-l1-1-0

srand
rand

api-ms-win-crt-math-l1-1-0

_fdopen

Exports

Exports

mosquitto_connack_string
mosquitto_connect
mosquitto_connect_async
mosquitto_connect_bind
mosquitto_connect_bind_async
mosquitto_connect_callback_set
mosquitto_connect_srv
mosquitto_destroy
mosquitto_disconnect
mosquitto_disconnect_callback_set
mosquitto_lib_cleanup
mosquitto_lib_init
mosquitto_lib_version
mosquitto_log_callback_set
mosquitto_loop
mosquitto_loop_forever
mosquitto_loop_misc
mosquitto_loop_read
mosquitto_loop_start
mosquitto_loop_stop
mosquitto_loop_write
mosquitto_max_inflight_messages_set
mosquitto_message_callback_set
mosquitto_message_copy
mosquitto_message_free
mosquitto_message_retry_set
mosquitto_new
mosquitto_opts_set
mosquitto_pub_topic_check
mosquitto_publish
mosquitto_publish_callback_set
mosquitto_reconnect
mosquitto_reconnect_async
mosquitto_reconnect_delay_set
mosquitto_reinitialise
mosquitto_socket
mosquitto_socks5_set
mosquitto_strerror
mosquitto_sub_topic_check
mosquitto_sub_topic_tokenise
mosquitto_sub_topic_tokens_free
mosquitto_subscribe
mosquitto_subscribe_callback_set
mosquitto_threaded_set
mosquitto_tls_insecure_set
mosquitto_tls_opts_set
mosquitto_tls_psk_set
mosquitto_tls_set
mosquitto_topic_matches_sub
mosquitto_unsubscribe
mosquitto_unsubscribe_callback_set
mosquitto_user_data_set
mosquitto_username_pw_set
mosquitto_want_write
mosquitto_will_clear
mosquitto_will_set

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17821166c0b182edec6a6aa8e5774c3e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

libssl-1_1

libcrypto-1_1

pthreadvc2

ws2_32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 29KB - Virtual size: 29KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 924B

.gfids Size: 512B - Virtual size: 20B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 924B

.gfids
Size: 512B - Virtual size: 20B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1KB - Virtual size: 1KB