52b4a2e682872ad3eb1c4e41931e139100c52b4d0a5f43cc2942009c1175ecf1

Sharing

Copy URL

Twitter E-mail

General

Target

52b4a2e682872ad3eb1c4e41931e139100c52b4d0a5f43cc2942009c1175ecf1
Size

862KB
MD5

387a9e829dfd2537b48c8bc51c64a7c5
SHA1

02bac5ddc06df556e40138f291a83a697d8deeda
SHA256

52b4a2e682872ad3eb1c4e41931e139100c52b4d0a5f43cc2942009c1175ecf1
SHA512

ad59e1a17d52a0bb357a85276810bbe22a09ea3cb0d0ce46f6ad7aa232219ac710945a2ddbb7821d4f030e42890e2a4de5ee50b104889632847fbec28cf80946
SSDEEP

12288:/7BSB6LbQYuyLwNSreAf3f9vi2FlCfgorc/rwMXTpKGTtlCfgorc/rwMXTpKGT3Z:/7BSB61uZUfNi2SfIsO6fIsO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52b4a2e682872ad3eb1c4e41931e139100c52b4d0a5f43cc2942009c1175ecf1

Files

52b4a2e682872ad3eb1c4e41931e139100c52b4d0a5f43cc2942009c1175ecf1
.exe windows x86

c879bfe9b30fa6e0394453bb5b041cfa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libcef

cef_log
cef_string_multimap_alloc
cef_string_multimap_free
cef_string_list_copy
cef_v8context_get_current_context
cef_process_message_create
cef_api_hash
cef_string_multimap_key
cef_execute_process
cef_string_list_free
cef_string_list_alloc
cef_string_userfree_utf16_free
cef_string_multimap_value
cef_string_multimap_size
cef_string_map_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_string_map_free
cef_string_map_alloc
cef_v8value_create_function
cef_string_utf16_cmp
cef_string_utf16_set
cef_string_utf16_to_utf8
cef_string_utf16_clear
cef_string_utf8_to_utf16
cef_string_multimap_append
cef_string_utf8_clear

kernel32

CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
GetProcessHeap
WriteConsoleW
GetLastError
SetLastError
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
CloseHandle
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetFileType
HeapFree
HeapAlloc
GetACP
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
LoadLibraryExW
FreeLibrary
RaiseException
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
GetProcAddress
GetModuleHandleW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
InitializeCriticalSectionAndSpinCount
DecodePointer
EncodePointer
MultiByteToWideChar
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
FlushFileBuffers

Sections

.text
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 576KB - Virtual size: 575KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c879bfe9b30fa6e0394453bb5b041cfa

Headers

DLL Characteristics

File Characteristics

Imports

libcef

kernel32

Sections

.text Size: 201KB - Virtual size: 201KB

.rdata Size: 67KB - Virtual size: 66KB

.data Size: 3KB - Virtual size: 7KB

.rsrc Size: 576KB - Virtual size: 575KB

.reloc Size: 13KB - Virtual size: 13KB

.text
Size: 201KB - Virtual size: 201KB

.rdata
Size: 67KB - Virtual size: 66KB

.data
Size: 3KB - Virtual size: 7KB

.rsrc
Size: 576KB - Virtual size: 575KB

.reloc
Size: 13KB - Virtual size: 13KB