264d1b796082674a4ae027f81233c810N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

264d1b796082674a4ae027f81233c810N.exe
Size

2.8MB
MD5

264d1b796082674a4ae027f81233c810
SHA1

a0dfa918e3af02874abfe05b41d1bdf5934fcfb1
SHA256

ee6be64b9b080d4f11cefffd9bfbf27be0dff4769cd6da531fec1ba2670242e3
SHA512

042dfae5ec5271d52710b3ca1fccc804606c6bf213c2873abcfbacfdf0e157ab9c298aaf37acbbe95e4d9ef01cb9ee8aba30995a7b2e1134c22970ac6417c545
SSDEEP

49152:115oqqsYtrHpgwP0TX7PPL66ynxRjpOIWO5Gtlq5FMusotEAOAxOW2LXDiQqxXOp:1QP0CqOzhseO3qxXOy9G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
264d1b796082674a4ae027f81233c810N.exe

Files

264d1b796082674a4ae027f81233c810N.exe
.dll windows:4 windows x64 arch:x64

89063c20646d79f6c1f4e0e84d134bdb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

CryptAcquireContextW
CryptCreateHash
CryptDecrypt
CryptDestroyHash
CryptGetHashParam
CryptGetProvParam
CryptReleaseContext
CryptSetHashParam
CryptSetProvParam
CryptSignHashA

libbrotlidec

BrotliDecoderDecompress

libbrotlienc

BrotliEncoderCompress
BrotliEncoderMaxCompressedSize

crypt32

CertCloseStore
CertDeleteCertificateFromStore
CertEnumCRLsInStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore
PFXImportCertStore

libgcc_s_seh-1

__emutls_get_address

libgmp-10

__gmp_get_memory_functions
__gmp_set_memory_functions
__gmpn_cmp
__gmpn_cnd_add_n
__gmpn_copyi
__gmpn_rshift
__gmpn_sub_n
__gmpn_zero
__gmpn_zero_p
__gmpz_add
__gmpz_add_ui
__gmpz_cdiv_q
__gmpz_clear
__gmpz_cmp
__gmpz_cmp_ui
__gmpz_export
__gmpz_fdiv_q
__gmpz_fdiv_q_2exp
__gmpz_fdiv_r
__gmpz_fdiv_r_2exp
__gmpz_gcd
__gmpz_import
__gmpz_init
__gmpz_init_set_str
__gmpz_invert
__gmpz_lcm
__gmpz_limbs_finish
__gmpz_limbs_read
__gmpz_limbs_write
__gmpz_mod
__gmpz_mul
__gmpz_mul_2exp
__gmpz_mul_ui
__gmpz_powm
__gmpz_probab_prime_p
__gmpz_set
__gmpz_set_ui
__gmpz_size
__gmpz_sizeinbase
__gmpz_sqrt
__gmpz_sub
__gmpz_sub_ui
__gmpz_tdiv_q_2exp
__gmpz_tdiv_r_2exp
__gmpz_tstbit

libhogweed-6

nettle_curve25519_mul
nettle_curve25519_mul_g
nettle_curve448_mul
nettle_curve448_mul_g
nettle_dsa_generate_params
nettle_dsa_params_clear
nettle_dsa_params_init
nettle_dsa_sign
nettle_dsa_signature_clear
nettle_dsa_signature_init
nettle_dsa_verify
nettle_ecc_bit_size
nettle_ecc_point_clear
nettle_ecc_point_get
nettle_ecc_point_init
nettle_ecc_point_mul
nettle_ecc_point_mul_g
nettle_ecc_point_set
nettle_ecc_scalar_clear
nettle_ecc_scalar_get
nettle_ecc_scalar_init
nettle_ecc_scalar_set
nettle_ecc_size
nettle_ecc_size_a
nettle_ecdsa_generate_keypair
nettle_ecdsa_sign
nettle_ecdsa_verify
nettle_ed25519_sha512_public_key
nettle_ed25519_sha512_sign
nettle_ed25519_sha512_verify
nettle_ed448_shake256_public_key
nettle_ed448_shake256_sign
nettle_ed448_shake256_verify
nettle_get_gost_gc256b
nettle_get_gost_gc512a
nettle_get_secp_256r1
nettle_get_secp_384r1
nettle_get_secp_521r1
nettle_gostdsa_sign
nettle_gostdsa_verify
nettle_gostdsa_vko
nettle_mpz_get_str_256
nettle_mpz_random
nettle_mpz_random_size
nettle_mpz_set_str_256_s
nettle_mpz_set_str_256_u
nettle_mpz_sizeinbase_256_s
nettle_mpz_sizeinbase_256_u
nettle_pkcs1_rsa_digest_encode
nettle_pss_encode_mgf1
nettle_rsa_decrypt_tr
nettle_rsa_encrypt
nettle_rsa_generate_keypair
nettle_rsa_pkcs1_sign_tr
nettle_rsa_pkcs1_verify
nettle_rsa_private_key_clear
nettle_rsa_private_key_init
nettle_rsa_private_key_prepare
nettle_rsa_pss_sha256_sign_digest_tr
nettle_rsa_pss_sha256_verify_digest
nettle_rsa_pss_sha384_sign_digest_tr
nettle_rsa_pss_sha384_verify_digest
nettle_rsa_pss_sha512_sign_digest_tr
nettle_rsa_pss_sha512_verify_digest
nettle_rsa_public_key_clear
nettle_rsa_public_key_init
nettle_rsa_public_key_prepare
nettle_rsa_sec_decrypt

libidn2-0

idn2_free
idn2_strerror
idn2_to_ascii_8z
idn2_to_unicode_8z8z

kernel32

CloseHandle
CreateEventA
CreateFileA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FindClose
FindFirstFileA
FreeLibrary
GetCurrentProcess
GetCurrentThreadId
GetFileAttributesW
GetFileInformationByHandle
GetFileType
GetFinalPathNameByHandleA
GetHandleInformation
GetLastError
GetSystemTimePreciseAsFileTime
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
PeekNamedPipe
RtlVirtualUnwind
SetEvent
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_close
_dup2
_errno
_fdopen
_fileno
_findclose
_get_osfhandle
_getcwd
_getmaxstdio
_gmtime64
_initterm
_localtime64
_lock
_lseeki64
_mkdir
_open
_open_osfhandle
_read
_setmaxstdio
_setmode
_stricmp
_time64
_unlock
_wassert
_wfindfirst64
_wfindnext64
_wfullpath
abort
atoi
atol
calloc
exit
fclose
ferror
fflush
fgetpos
fgets
fopen
fputc
fread
free
fseek
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
qsort
realloc
setvbuf
strcat
strchr
strcmp
strcpy
strerror
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strstr
strtol
strtoul
vfprintf
wcscat
wcscpy
wcslen

ncrypt

BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider
NCryptDecrypt
NCryptDeleteKey
NCryptFreeObject
NCryptGetProperty
NCryptOpenKey
NCryptOpenStorageProvider
NCryptSignHash

libnettle-8

nettle_aes128_decrypt
nettle_aes128_encrypt
nettle_aes128_set_decrypt_key
nettle_aes128_set_encrypt_key
nettle_aes192_decrypt
nettle_aes192_encrypt
nettle_aes192_set_decrypt_key
nettle_aes192_set_encrypt_key
nettle_aes256_decrypt
nettle_aes256_encrypt
nettle_aes256_set_decrypt_key
nettle_aes256_set_encrypt_key
nettle_arcfour128_set_key
nettle_arcfour_crypt
nettle_arcfour_set_key
nettle_arctwo40_set_key
nettle_arctwo_decrypt
nettle_arctwo_encrypt
nettle_base64_decode_final
nettle_base64_decode_init
nettle_base64_decode_update
nettle_base64_encode_raw
nettle_camellia128_crypt
nettle_camellia128_set_encrypt_key
nettle_camellia192_set_decrypt_key
nettle_camellia192_set_encrypt_key
nettle_camellia256_crypt
nettle_camellia256_set_decrypt_key
nettle_camellia256_set_encrypt_key
nettle_camellia_set_decrypt_key
nettle_cbc_decrypt
nettle_cbc_encrypt
nettle_ccm_decrypt_message
nettle_ccm_encrypt_message
nettle_cfb8_decrypt
nettle_cfb8_encrypt
nettle_cfb_decrypt
nettle_cfb_encrypt
nettle_chacha_crypt
nettle_chacha_crypt32
nettle_chacha_poly1305_decrypt
nettle_chacha_poly1305_digest
nettle_chacha_poly1305_encrypt
nettle_chacha_poly1305_set_key
nettle_chacha_poly1305_set_nonce
nettle_chacha_poly1305_update
nettle_chacha_set_counter
nettle_chacha_set_counter32
nettle_chacha_set_key
nettle_chacha_set_nonce
nettle_chacha_set_nonce96
nettle_cmac128_digest
nettle_cmac128_init
nettle_cmac128_set_key
nettle_cmac128_update
nettle_cmac64_digest
nettle_cmac64_init
nettle_cmac64_set_key
nettle_cmac64_update
nettle_cmac_aes128_digest
nettle_cmac_aes128_set_key
nettle_cmac_aes128_update
nettle_cmac_aes256_digest
nettle_cmac_aes256_set_key
nettle_cmac_aes256_update
nettle_ctr_crypt
nettle_des3_decrypt
nettle_des3_encrypt
nettle_des3_set_key
nettle_des_decrypt
nettle_des_encrypt
nettle_des_set_key
nettle_gcm_aes128_digest
nettle_gcm_aes128_set_iv
nettle_gcm_aes128_set_key
nettle_gcm_aes128_update
nettle_gcm_aes192_digest
nettle_gcm_aes192_set_iv
nettle_gcm_aes192_set_key
nettle_gcm_aes192_update
nettle_gcm_aes256_digest
nettle_gcm_aes256_set_iv
nettle_gcm_aes256_set_key
nettle_gcm_aes256_update
nettle_gcm_camellia128_digest
nettle_gcm_camellia128_set_iv
nettle_gcm_camellia128_set_key
nettle_gcm_camellia128_update
nettle_gcm_camellia256_digest
nettle_gcm_camellia256_set_iv
nettle_gcm_camellia256_set_key
nettle_gcm_camellia256_update
nettle_gcm_decrypt
nettle_gcm_digest
nettle_gcm_encrypt
nettle_gcm_set_iv
nettle_gcm_set_key
nettle_gcm_update
nettle_gosthash94_init
nettle_gosthash94cp_digest
nettle_gosthash94cp_update
nettle_hkdf_expand
nettle_hkdf_extract
nettle_hmac_digest
nettle_hmac_gosthash94cp_digest
nettle_hmac_gosthash94cp_set_key
nettle_hmac_gosthash94cp_update
nettle_hmac_md5_digest
nettle_hmac_md5_set_key
nettle_hmac_md5_update
nettle_hmac_set_key
nettle_hmac_sha1_digest
nettle_hmac_sha1_set_key
nettle_hmac_sha1_update
nettle_hmac_sha224_digest
nettle_hmac_sha224_set_key
nettle_hmac_sha256_digest
nettle_hmac_sha256_set_key
nettle_hmac_sha256_update
nettle_hmac_sha384_digest
nettle_hmac_sha384_set_key
nettle_hmac_sha512_digest
nettle_hmac_sha512_set_key
nettle_hmac_sha512_update
nettle_hmac_streebog256_digest
nettle_hmac_streebog256_set_key
nettle_hmac_streebog512_digest
nettle_hmac_streebog512_set_key
nettle_hmac_streebog512_update
nettle_md2_digest
nettle_md2_init
nettle_md2_update
nettle_md5_digest
nettle_md5_init
nettle_md5_update
nettle_memeql_sec
nettle_memxor
nettle_memxor3
nettle_pbkdf2
nettle_salsa20_256_set_key
nettle_salsa20_crypt
nettle_salsa20r12_crypt
nettle_sha1_digest
nettle_sha1_init
nettle_sha1_update
nettle_sha224_digest
nettle_sha224_init
nettle_sha256
nettle_sha256_digest
nettle_sha256_init
nettle_sha256_update
nettle_sha384
nettle_sha384_digest
nettle_sha384_init
nettle_sha3_224_digest
nettle_sha3_224_init
nettle_sha3_224_update
nettle_sha3_256_digest
nettle_sha3_256_init
nettle_sha3_256_update
nettle_sha3_384_digest
nettle_sha3_384_init
nettle_sha3_384_update
nettle_sha3_512_digest
nettle_sha3_512_init
nettle_sha3_512_update
nettle_sha512
nettle_sha512_digest
nettle_sha512_init
nettle_sha512_update
nettle_siv_cmac_aes128_decrypt_message
nettle_siv_cmac_aes128_encrypt_message
nettle_siv_cmac_aes128_set_key
nettle_siv_cmac_aes256_decrypt_message
nettle_siv_cmac_aes256_encrypt_message
nettle_siv_cmac_aes256_set_key
nettle_streebog256_digest
nettle_streebog256_init
nettle_streebog512_digest
nettle_streebog512_init
nettle_streebog512_update
nettle_umac128_digest
nettle_umac128_set_key
nettle_umac128_set_nonce
nettle_umac128_update
nettle_umac96_digest
nettle_umac96_set_key
nettle_umac96_set_nonce
nettle_umac96_update
nettle_xts_aes128_decrypt_message
nettle_xts_aes128_encrypt_message
nettle_xts_aes128_set_decrypt_key
nettle_xts_aes128_set_encrypt_key
nettle_xts_aes256_decrypt_message
nettle_xts_aes256_encrypt_message
nettle_xts_aes256_set_decrypt_key
nettle_xts_aes256_set_encrypt_key

libp11-kit-0

p11_kit_config_option
p11_kit_message
p11_kit_module_finalize
p11_kit_module_get_flags
p11_kit_module_get_name
p11_kit_module_initialize
p11_kit_module_load
p11_kit_module_release
p11_kit_modules_load_and_initialize
p11_kit_pin_file_callback
p11_kit_pin_get_length
p11_kit_pin_get_value
p11_kit_pin_new_for_string
p11_kit_pin_register_callback
p11_kit_pin_request
p11_kit_pin_unref
p11_kit_pin_unregister_callback
p11_kit_space_strdup
p11_kit_space_strlen
p11_kit_strerror
p11_kit_uri_format
p11_kit_uri_free
p11_kit_uri_get_attribute
p11_kit_uri_get_attributes
p11_kit_uri_get_module_info
p11_kit_uri_get_pin_source
p11_kit_uri_get_pin_value
p11_kit_uri_get_token_info
p11_kit_uri_match_module_info
p11_kit_uri_match_token_info
p11_kit_uri_new
p11_kit_uri_parse
p11_kit_uri_set_attribute

libwinpthread-1

clock_gettime
pthread_getspecific
pthread_key_create
pthread_key_delete
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_gettype
pthread_mutexattr_init
pthread_mutexattr_settype
pthread_once
pthread_rwlock_rdlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_setspecific

ws2_32

WSAGetLastError
WSASend
WSASetLastError
connect
inet_ntop
inet_pton
recv
select
send
setsockopt

zlib1

compress
compressBound
uncompress

libzstd

ZSTD_compress
ZSTD_compressBound
ZSTD_decompress
ZSTD_isError

libssp-0

__stack_chk_fail
__stack_chk_guard

Exports

Exports

_dsa_generate_dss_g
_dsa_generate_dss_pq
_dsa_validate_dss_g
_dsa_validate_dss_pq
_gnutls13_psk_ext_iter_next_binder
_gnutls13_psk_ext_iter_next_identity
_gnutls13_psk_ext_parser_init
_gnutls_anti_replay_check
_gnutls_bin2hex
_gnutls_buffer_append_str
_gnutls_buffer_clear
_gnutls_buffer_init
_gnutls_buffer_pop_datum
_gnutls_buffer_to_datum
_gnutls_buffer_unescape
_gnutls_cidr_to_string
_gnutls_cipher_get_iv
_gnutls_cipher_to_entry
_gnutls_crypto_register_cipher
_gnutls_decode_ber_rs_raw
_gnutls_default_priority_string
_gnutls_digest_exists
_gnutls_ecc_curve_is_supported
_gnutls_encode_ber_rs_raw
_gnutls_global_set_gettime_function
_gnutls_global_version
_gnutls_hello_set_default_version
_gnutls_iov_iter_init
_gnutls_iov_iter_next
_gnutls_iov_iter_sync
_gnutls_ip_to_string
_gnutls_lib_force_operational
_gnutls_lib_simulate_error
_gnutls_log
_gnutls_log_level
_gnutls_mac_to_entry
_gnutls_mpi_log
_gnutls_mpi_ops
_gnutls_pathbuf_append
_gnutls_pathbuf_deinit
_gnutls_pathbuf_init
_gnutls_pathbuf_truncate
_gnutls_pkcs11_token_get_url
_gnutls_pkcs12_string_to_key
_gnutls_prf_raw
_gnutls_record_overhead
_gnutls_record_set_default_version
_gnutls_resolve_priorities
_gnutls_rsa_pms_set_version
_gnutls_server_name_set_raw
_gnutls_session_ticket_disable_server
_gnutls_set_session_ticket_key_rotation_callback
_gnutls_supplemental_deinit
_gnutls_ucs2_to_utf8
_gnutls_utcTime2gtime
_gnutls_utf8_to_ucs2
_gnutls_version_to_entry
_gnutls_x509_generalTime2gtime
_gnutls_x509_name_constraints_merge
_rsa_generate_fips186_4_keypair
dsa_generate_dss_keypair
gnutls_aead_cipher_decrypt
gnutls_aead_cipher_decryptv2
gnutls_aead_cipher_deinit
gnutls_aead_cipher_encrypt
gnutls_aead_cipher_encryptv
gnutls_aead_cipher_encryptv2
gnutls_aead_cipher_init
gnutls_aead_cipher_set_key
gnutls_alert_get
gnutls_alert_get_name
gnutls_alert_get_strname
gnutls_alert_send
gnutls_alert_send_appropriate
gnutls_alert_set_read_function
gnutls_alpn_get_selected_protocol
gnutls_alpn_set_protocols
gnutls_anon_allocate_client_credentials
gnutls_anon_allocate_server_credentials
gnutls_anon_free_client_credentials
gnutls_anon_free_server_credentials
gnutls_anon_set_params_function
gnutls_anon_set_server_dh_params
gnutls_anon_set_server_known_dh_params
gnutls_anon_set_server_params_function
gnutls_anti_replay_deinit
gnutls_anti_replay_enable
gnutls_anti_replay_init
gnutls_anti_replay_set_add_function
gnutls_anti_replay_set_ptr
gnutls_anti_replay_set_window
gnutls_auth_client_get_type
gnutls_auth_get_type
gnutls_auth_server_get_type
gnutls_base64_decode2
gnutls_base64_encode2
gnutls_buffer_append_data
gnutls_bye
gnutls_calloc
gnutls_certificate_activation_time_peers
gnutls_certificate_allocate_credentials
gnutls_certificate_client_get_request_status
gnutls_certificate_expiration_time_peers
gnutls_certificate_free_ca_names
gnutls_certificate_free_cas
gnutls_certificate_free_credentials
gnutls_certificate_free_crls
gnutls_certificate_free_keys
gnutls_certificate_get_crt_raw
gnutls_certificate_get_issuer
gnutls_certificate_get_ocsp_expiration
gnutls_certificate_get_openpgp_crt
gnutls_certificate_get_openpgp_key
gnutls_certificate_get_ours
gnutls_certificate_get_peers
gnutls_certificate_get_peers_subkey_id
gnutls_certificate_get_trust_list
gnutls_certificate_get_verify_flags
gnutls_certificate_get_x509_crt
gnutls_certificate_get_x509_key
gnutls_certificate_send_x509_rdn_sequence
gnutls_certificate_server_set_request
gnutls_certificate_set_dh_params
gnutls_certificate_set_flags
gnutls_certificate_set_key
gnutls_certificate_set_known_dh_params
gnutls_certificate_set_ocsp_status_request_file
gnutls_certificate_set_ocsp_status_request_file2
gnutls_certificate_set_ocsp_status_request_function
gnutls_certificate_set_ocsp_status_request_function2
gnutls_certificate_set_ocsp_status_request_mem
gnutls_certificate_set_openpgp_key
gnutls_certificate_set_openpgp_key_file
gnutls_certificate_set_openpgp_key_file2
gnutls_certificate_set_openpgp_key_mem
gnutls_certificate_set_openpgp_key_mem2
gnutls_certificate_set_openpgp_keyring_file
gnutls_certificate_set_openpgp_keyring_mem
gnutls_certificate_set_params_function
gnutls_certificate_set_pin_function
gnutls_certificate_set_rawpk_key_file
gnutls_certificate_set_rawpk_key_mem
gnutls_certificate_set_retrieve_function
gnutls_certificate_set_retrieve_function2
gnutls_certificate_set_retrieve_function3
gnutls_certificate_set_trust_list
gnutls_certificate_set_verify_flags
gnutls_certificate_set_verify_function
gnutls_certificate_set_verify_limits
gnutls_certificate_set_x509_crl
gnutls_certificate_set_x509_crl_file
gnutls_certificate_set_x509_crl_mem
gnutls_certificate_set_x509_key
gnutls_certificate_set_x509_key_file
gnutls_certificate_set_x509_key_file2
gnutls_certificate_set_x509_key_mem
gnutls_certificate_set_x509_key_mem2
gnutls_certificate_set_x509_simple_pkcs12_file
gnutls_certificate_set_x509_simple_pkcs12_mem
gnutls_certificate_set_x509_system_trust
gnutls_certificate_set_x509_trust
gnutls_certificate_set_x509_trust_dir
gnutls_certificate_set_x509_trust_file
gnutls_certificate_set_x509_trust_mem
gnutls_certificate_type_get
gnutls_certificate_type_get2
gnutls_certificate_type_get_id
gnutls_certificate_type_get_name
gnutls_certificate_type_list
gnutls_certificate_verification_profile_get_id
gnutls_certificate_verification_profile_get_name
gnutls_certificate_verification_status_print
gnutls_certificate_verify_peers
gnutls_certificate_verify_peers2
gnutls_certificate_verify_peers3
gnutls_check_version
gnutls_cipher_add_auth
gnutls_cipher_decrypt
gnutls_cipher_decrypt2
gnutls_cipher_decrypt3
gnutls_cipher_deinit
gnutls_cipher_encrypt
gnutls_cipher_encrypt2
gnutls_cipher_encrypt3
gnutls_cipher_get
gnutls_cipher_get_block_size
gnutls_cipher_get_id
gnutls_cipher_get_iv_size
gnutls_cipher_get_key_size
gnutls_cipher_get_name
gnutls_cipher_get_tag_size
gnutls_cipher_init
gnutls_cipher_list
gnutls_cipher_self_test
gnutls_cipher_set_iv
gnutls_cipher_suite_get_name
gnutls_cipher_suite_info
gnutls_cipher_tag
gnutls_ciphersuite_get
gnutls_compress_certificate_get_selected_method
gnutls_compress_certificate_set_methods
gnutls_compression_get
gnutls_compression_get_id
gnutls_compression_get_name
gnutls_compression_list
gnutls_credentials_clear
gnutls_credentials_get
gnutls_credentials_set
gnutls_crypto_register_aead_cipher
gnutls_crypto_register_cipher
gnutls_crypto_register_digest
gnutls_crypto_register_mac
gnutls_db_check_entry
gnutls_db_check_entry_expire_time
gnutls_db_check_entry_time
gnutls_db_get_default_cache_expiration
gnutls_db_get_ptr
gnutls_db_remove_session
gnutls_db_set_cache_expiration
gnutls_db_set_ptr
gnutls_db_set_remove_function
gnutls_db_set_retrieve_function
gnutls_db_set_store_function
gnutls_decode_ber_digest_info
gnutls_decode_gost_rs_value
gnutls_decode_rs_value
gnutls_deinit
gnutls_dh_get_group
gnutls_dh_get_peers_public_bits
gnutls_dh_get_prime_bits
gnutls_dh_get_pubkey
gnutls_dh_get_secret_bits
gnutls_dh_params_cpy
gnutls_dh_params_deinit
gnutls_dh_params_export2_pkcs3
gnutls_dh_params_export_pkcs3
gnutls_dh_params_export_raw
gnutls_dh_params_generate2
gnutls_dh_params_import_dsa
gnutls_dh_params_import_pkcs3
gnutls_dh_params_import_raw
gnutls_dh_params_import_raw2
gnutls_dh_params_import_raw3
gnutls_dh_params_init
gnutls_dh_set_prime_bits
gnutls_digest_get_id
gnutls_digest_get_name
gnutls_digest_get_oid
gnutls_digest_list
gnutls_digest_self_test
gnutls_digest_set_secure
gnutls_dtls_cookie_send
gnutls_dtls_cookie_verify
gnutls_dtls_get_data_mtu
gnutls_dtls_get_mtu
gnutls_dtls_get_timeout
gnutls_dtls_prestate_set
gnutls_dtls_set_data_mtu
gnutls_dtls_set_mtu
gnutls_dtls_set_timeouts
gnutls_early_cipher_get
gnutls_early_prf_hash_get
gnutls_ecc_curve_get
gnutls_ecc_curve_get_id
gnutls_ecc_curve_get_name
gnutls_ecc_curve_get_oid
gnutls_ecc_curve_get_pk
gnutls_ecc_curve_get_size
gnutls_ecc_curve_list
gnutls_ecc_curve_set_enabled
gnutls_encode_ber_digest_info
gnutls_encode_gost_rs_value
gnutls_encode_rs_value
gnutls_error_is_fatal
gnutls_error_to_alert
gnutls_est_record_overhead_size
gnutls_ext_get_current_msg
gnutls_ext_get_data
gnutls_ext_get_name
gnutls_ext_get_name2
gnutls_ext_raw_parse
gnutls_ext_register
gnutls_ext_set_data
gnutls_ffdhe_2048_group_generator
gnutls_ffdhe_2048_group_prime
gnutls_ffdhe_2048_group_q
gnutls_ffdhe_2048_key_bits
gnutls_ffdhe_3072_group_generator
gnutls_ffdhe_3072_group_prime
gnutls_ffdhe_3072_group_q
gnutls_ffdhe_3072_key_bits
gnutls_ffdhe_4096_group_generator
gnutls_ffdhe_4096_group_prime
gnutls_ffdhe_4096_group_q
gnutls_ffdhe_4096_key_bits
gnutls_ffdhe_6144_group_generator
gnutls_ffdhe_6144_group_prime
gnutls_ffdhe_6144_group_q
gnutls_ffdhe_6144_key_bits
gnutls_ffdhe_8192_group_generator
gnutls_ffdhe_8192_group_prime
gnutls_ffdhe_8192_group_q
gnutls_ffdhe_8192_key_bits
gnutls_fingerprint
gnutls_fips140_context_deinit
gnutls_fips140_context_init
gnutls_fips140_get_operation_state
gnutls_fips140_mode_enabled
gnutls_fips140_pop_context
gnutls_fips140_push_context
gnutls_fips140_run_self_tests
gnutls_fips140_set_mode
gnutls_free
gnutls_get_library_config
gnutls_get_system_config_file
gnutls_global_deinit
gnutls_global_init
gnutls_global_set_audit_log_function
gnutls_global_set_log_function
gnutls_global_set_log_level
gnutls_global_set_mem_functions
gnutls_global_set_mutex
gnutls_global_set_time_function
gnutls_gost_paramset_get_name
gnutls_gost_paramset_get_oid
gnutls_group_get
gnutls_group_get_id
gnutls_group_get_name
gnutls_group_list
gnutls_handshake
gnutls_handshake_description_get_name
gnutls_handshake_get_last_in
gnutls_handshake_get_last_out
gnutls_handshake_set_hook_function
gnutls_handshake_set_max_packet_length
gnutls_handshake_set_post_client_hello_function
gnutls_handshake_set_private_extensions
gnutls_handshake_set_random
gnutls_handshake_set_read_function
gnutls_handshake_set_secret_function
gnutls_handshake_set_timeout
gnutls_handshake_write
gnutls_hash
gnutls_hash_copy
gnutls_hash_deinit
gnutls_hash_fast
gnutls_hash_get_len
gnutls_hash_init
gnutls_hash_output
gnutls_heartbeat_allowed
gnutls_heartbeat_enable
gnutls_heartbeat_get_timeout
gnutls_heartbeat_ping
gnutls_heartbeat_pong
gnutls_heartbeat_set_timeouts
gnutls_hex2bin
gnutls_hex_decode
gnutls_hex_decode2
gnutls_hex_encode
gnutls_hex_encode2
gnutls_hkdf_expand
gnutls_hkdf_extract
gnutls_hkdf_self_test
gnutls_hmac
gnutls_hmac_copy
gnutls_hmac_deinit
gnutls_hmac_fast
gnutls_hmac_get_key_size
gnutls_hmac_get_len
gnutls_hmac_init
gnutls_hmac_output
gnutls_hmac_set_nonce
gnutls_idna_map
gnutls_idna_reverse_map
gnutls_init
gnutls_key_generate
gnutls_kx_get
gnutls_kx_get_id
gnutls_kx_get_name
gnutls_kx_list
gnutls_load_file
gnutls_mac_get
gnutls_mac_get_id
gnutls_mac_get_key_size
gnutls_mac_get_name
gnutls_mac_get_nonce_size
gnutls_mac_list
gnutls_mac_self_test
gnutls_malloc
gnutls_memcmp
gnutls_memset
gnutls_ocsp_req_add_cert
gnutls_ocsp_req_add_cert_id
gnutls_ocsp_req_deinit
gnutls_ocsp_req_export
gnutls_ocsp_req_get_cert_id
gnutls_ocsp_req_get_extension
gnutls_ocsp_req_get_nonce
gnutls_ocsp_req_get_version
gnutls_ocsp_req_import
gnutls_ocsp_req_init
gnutls_ocsp_req_print
gnutls_ocsp_req_randomize_nonce
gnutls_ocsp_req_set_extension
gnutls_ocsp_req_set_nonce
gnutls_ocsp_resp_check_crt
gnutls_ocsp_resp_deinit
gnutls_ocsp_resp_export
gnutls_ocsp_resp_export2
gnutls_ocsp_resp_get_certs
gnutls_ocsp_resp_get_extension
gnutls_ocsp_resp_get_nonce
gnutls_ocsp_resp_get_produced
gnutls_ocsp_resp_get_responder
gnutls_ocsp_resp_get_responder2
gnutls_ocsp_resp_get_responder_raw_id
gnutls_ocsp_resp_get_response
gnutls_ocsp_resp_get_signature
gnutls_ocsp_resp_get_signature_algorithm
gnutls_ocsp_resp_get_single
gnutls_ocsp_resp_get_status
gnutls_ocsp_resp_get_version
gnutls_ocsp_resp_import
gnutls_ocsp_resp_import2
gnutls_ocsp_resp_init
gnutls_ocsp_resp_list_import2
gnutls_ocsp_resp_print
gnutls_ocsp_resp_verify
gnutls_ocsp_resp_verify_direct
gnutls_ocsp_status_request_enable_client
gnutls_ocsp_status_request_get
gnutls_ocsp_status_request_get2
gnutls_ocsp_status_request_is_checked
gnutls_oid_to_digest
gnutls_oid_to_ecc_curve
gnutls_oid_to_gost_paramset
gnutls_oid_to_mac
gnutls_oid_to_pk
gnutls_oid_to_sign
gnutls_openpgp_crt_check_email
gnutls_openpgp_crt_check_hostname
gnutls_openpgp_crt_check_hostname2
gnutls_openpgp_crt_deinit
gnutls_openpgp_crt_export
gnutls_openpgp_crt_export2
gnutls_openpgp_crt_get_auth_subkey
gnutls_openpgp_crt_get_creation_time
gnutls_openpgp_crt_get_expiration_time
gnutls_openpgp_crt_get_fingerprint
gnutls_openpgp_crt_get_key_id
gnutls_openpgp_crt_get_key_usage
gnutls_openpgp_crt_get_name
gnutls_openpgp_crt_get_pk_algorithm
gnutls_openpgp_crt_get_pk_dsa_raw
gnutls_openpgp_crt_get_pk_rsa_raw
gnutls_openpgp_crt_get_preferred_key_id
gnutls_openpgp_crt_get_revoked_status
gnutls_openpgp_crt_get_subkey_count
gnutls_openpgp_crt_get_subkey_creation_time
gnutls_openpgp_crt_get_subkey_expiration_time
gnutls_openpgp_crt_get_subkey_fingerprint
gnutls_openpgp_crt_get_subkey_id
gnutls_openpgp_crt_get_subkey_idx
gnutls_openpgp_crt_get_subkey_pk_algorithm
gnutls_openpgp_crt_get_subkey_pk_dsa_raw
gnutls_openpgp_crt_get_subkey_pk_rsa_raw
gnutls_openpgp_crt_get_subkey_revoked_status
gnutls_openpgp_crt_get_subkey_usage
gnutls_openpgp_crt_get_version
gnutls_openpgp_crt_import
gnutls_openpgp_crt_init
gnutls_openpgp_crt_print
gnutls_openpgp_crt_set_preferred_key_id
gnutls_openpgp_crt_verify_ring
gnutls_openpgp_crt_verify_self
gnutls_openpgp_keyring_check_id
gnutls_openpgp_keyring_deinit
gnutls_openpgp_keyring_get_crt
gnutls_openpgp_keyring_get_crt_count
gnutls_openpgp_keyring_import
gnutls_openpgp_keyring_init
gnutls_openpgp_privkey_deinit
gnutls_openpgp_privkey_export
gnutls_openpgp_privkey_export2
gnutls_openpgp_privkey_export_dsa_raw
gnutls_openpgp_privkey_export_rsa_raw
gnutls_openpgp_privkey_export_subkey_dsa_raw
gnutls_openpgp_privkey_export_subkey_rsa_raw
gnutls_openpgp_privkey_get_fingerprint
gnutls_openpgp_privkey_get_key_id
gnutls_openpgp_privkey_get_pk_algorithm
gnutls_openpgp_privkey_get_preferred_key_id
gnutls_openpgp_privkey_get_revoked_status
gnutls_openpgp_privkey_get_subkey_count
gnutls_openpgp_privkey_get_subkey_creation_time
gnutls_openpgp_privkey_get_subkey_expiration_time
gnutls_openpgp_privkey_get_subkey_fingerprint
gnutls_openpgp_privkey_get_subkey_id
gnutls_openpgp_privkey_get_subkey_idx
gnutls_openpgp_privkey_get_subkey_pk_algorithm

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 759KB - Virtual size: 758KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

89063c20646d79f6c1f4e0e84d134bdb

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

libbrotlidec

libbrotlienc

crypt32

libgcc_s_seh-1

libgmp-10

libhogweed-6

libidn2-0

kernel32

msvcrt

ncrypt

libnettle-8

libp11-kit-0

libwinpthread-1

ws2_32

zlib1

libzstd

libssp-0

Exports

Exports

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.data Size: 8KB - Virtual size: 8KB

.rdata Size: 759KB - Virtual size: 758KB

.pdata Size: 56KB - Virtual size: 55KB

.xdata Size: 53KB - Virtual size: 52KB

.bss Size: - Virtual size: 15KB

.edata Size: 51KB - Virtual size: 51KB

.idata Size: 23KB - Virtual size: 23KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.data
Size: 8KB - Virtual size: 8KB

.rdata
Size: 759KB - Virtual size: 758KB

.pdata
Size: 56KB - Virtual size: 55KB

.xdata
Size: 53KB - Virtual size: 52KB

.bss
Size: - Virtual size: 15KB

.edata
Size: 51KB - Virtual size: 51KB

.idata
Size: 23KB - Virtual size: 23KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 8KB - Virtual size: 8KB