C:\php-sdk\php56\vc11\x86\obj\Release_TS\php_mysqli.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f879c833eaa4073f0ab169412785dc7b57b7191fdfb95eb7f6f14ecaec29f6cdN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f879c833eaa4073f0ab169412785dc7b57b7191fdfb95eb7f6f14ecaec29f6cdN.dll
Resource
win10v2004-20240802-en
General
-
Target
f879c833eaa4073f0ab169412785dc7b57b7191fdfb95eb7f6f14ecaec29f6cdN
-
Size
88KB
-
MD5
bce010dd70dda9c5b09e33e4c0dddca0
-
SHA1
b64c624077916d36f3b809ab5bfb4e4a66be1fa3
-
SHA256
f879c833eaa4073f0ab169412785dc7b57b7191fdfb95eb7f6f14ecaec29f6cd
-
SHA512
85e4953b193d3e544dab8b464307665a091b75bda0b3441f3347e650b3f9afe9832b4ad54f471aaf584502301092ce2e560a715d90fbed805e52e6c9c8967820
-
SSDEEP
1536:l1s3KUudB5HurWvwpgctPAQij36TgjG7PvIWVB:UKHnQijKTy4QWVB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f879c833eaa4073f0ab169412785dc7b57b7191fdfb95eb7f6f14ecaec29f6cdN
Files
-
f879c833eaa4073f0ab169412785dc7b57b7191fdfb95eb7f6f14ecaec29f6cdN.dll windows:6 windows x86 arch:x86
4928bd303464d6d83d841d8694241fd6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
php5ts
zend_exception_get_default
zend_wrong_param_count
zend_hash_destroy
zend_register_internal_class
_ecalloc
_emalloc
zval_used_for_init
executor_globals_id
instanceof_function
mysqlnd_get_client_info
OnUpdateString
zend_get_std_object_handlers
_zval_copy_ctor_func
display_ini_entries
spl_ce_RuntimeException
zend_ptr_stack_clean
_efree
_zval_ptr_dtor
OnUpdateBool
php_info_print_table_start
zend_object_std_init
_zend_hash_add_or_update
zend_parse_method_parameters
zend_ce_traversable
mysqlnd_reverse_api_register_api
zend_ini_boolean_displayer_cb
_convert_to_string
zend_declare_property_null
zend_hash_num_elements
zend_register_ini_entries
zend_strndup
php_info_print_table_end
zend_call_function
zend_objects_store_put
zend_register_list_destructors_ex
zend_throw_exception_ex
_zval_dtor_func
add_property_long_ex
_zend_get_parameters_array_ex
_estrndup
_erealloc
_mysqlnd_debug
add_index_long
mysqlnd_get_client_version
_object_init
convert_to_long
add_index_zval
spprintf
_mysqlnd_init
add_property_string_ex
_array_init
_safe_emalloc
_object_init_ex
vspprintf
zend_update_property_long
zend_update_property_string
zend_throw_exception_object
_mysqlnd_get_client_stats
zend_ptr_stack_init_ex
zend_llist_get_first_ex
mysqlnd_connect
add_assoc_string_ex
_mysqlnd_poll
zval_add_ref
_estrdup
add_next_index_zval
_zend_hash_index_update_or_next_insert
zend_ptr_stack_num_elements
zend_llist_get_next_ex
add_assoc_long_ex
zend_error
zend_new_interned_string
OnUpdateStringUnempty
object_properties_init
zend_objects_get_address
zend_throw_exception
zend_object_std_dtor
_object_and_properties_init
zend_register_long_constant
zend_hash_move_forward_ex
php_error_docref0
zend_register_internal_class_ex
zend_object_store_get_object
zend_objects_destroy_object
display_link_numbers
zend_parse_parameters
ts_resource_ex
php_info_print_table_header
_zend_hash_init
OnUpdateLong
zend_fcall_info_args
zend_standard_class_def
zend_hash_find
zend_hash_internal_pointer_reset_ex
php_info_print_table_row
zend_declare_property_string
zend_class_implements
zend_ptr_stack_destroy
zend_hash_get_current_data_ex
ap_php_snprintf
zend_fetch_class
zend_merge_properties
convert_to_boolean
zend_unregister_ini_entries
zend_declare_property_long
zend_get_class_entry
msvcr110
memcpy
_except_handler4_common
__clean_type_info_names_internal
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_errno
calloc
exit
realloc
fprintf
__iob_func
free
_strnicmp
kernel32
GetCurrentProcessId
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
EncodePointer
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
Exports
Exports
get_module
mysqli_objects_new
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ