Static task
static1
Behavioral task
behavioral1
Sample
microminiforwebbrowser.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
microminiforwebbrowser.exe
Resource
win10v2004-20230703-en
General
-
Target
microminiforwebbrowser.exe
-
Size
659KB
-
MD5
51e7c66e81149f66b266fcb805330241
-
SHA1
bf4102a8ca713beccf875814031cc18722b61a5a
-
SHA256
95409611360e9bb4c474a49c439805f25ca3c377659bed7024becc5396332479
-
SHA512
1ec568f87fe1566ece85b2a17a9d79505c14d5fddcc61ebe8d578bab7e80a9bd92f392f7553c7d235374d7f7df5556034fa39827cf153c25d494e3082556d087
-
SSDEEP
12288:ofaxmj1qYT6miL7/hR65dGTow6WAQ4j0VwHVYY848WcTne9pGHNu4B2UD:ofwmpqYTRiLDhRudGow6WAQ4j0VwHVYl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource microminiforwebbrowser.exe
Files
-
microminiforwebbrowser.exe.exe windows x86
a21c61d5735d87580dea658cf9bdc10e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
SetUnhandledExceptionFilter
CreateMutexW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
GetUserDefaultLCID
InitializeCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
Sleep
OutputDebugStringW
MultiByteToWideChar
lstrcpyW
ReleaseMutex
CreateMutexA
MapViewOfFile
SetEnvironmentVariableW
CreateFileMappingA
OpenFileMappingA
WideCharToMultiByte
SetLastError
LocalFree
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObjectEx
GetProcAddress
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
LocalAlloc
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
CreateFileW
GetLastError
UnmapViewOfFile
user32
InvalidateRect
CopyRect
SendMessageW
GetClassInfoW
SetTimer
KillTimer
GetWindowRect
OffsetRect
LoadImageW
UpdateWindow
SetWindowPos
GetKeyState
MoveWindow
SetWindowTextW
ClientToScreen
DestroyWindow
MessageBoxW
PostMessageW
IsZoomed
GetSystemMenu
SetWindowRgn
IntersectRect
IsRectEmpty
PtInRect
DrawIconEx
EnableWindow
GetClientRect
GetSystemMetrics
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateRoundRectRgn
advapi32
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegFlushKey
mfc140u
ord1525
ord265
ord296
ord1045
ord4815
ord286
ord266
ord8360
ord12884
ord6966
ord5117
ord2990
ord7506
ord10915
ord11541
ord8895
ord1152
ord515
ord7139
ord11634
ord7820
ord14377
ord4885
ord1474
ord997
ord13070
ord1663
ord6129
ord6220
ord13756
ord3305
ord3302
ord10255
ord8210
ord2761
ord1476
ord14785
ord10285
ord280
ord10286
ord10284
ord10288
ord5652
ord11725
ord11726
ord9139
ord12089
ord1108
ord11936
ord12947
ord8965
ord12220
ord6978
ord11002
ord9256
ord3266
ord13878
ord12262
ord12258
ord1722
ord1744
ord1770
ord1756
ord12246
ord4936
ord5003
ord4948
ord4966
ord4960
ord4954
ord5013
ord4997
ord4942
ord5019
ord4974
ord4912
ord4927
ord4988
ord4502
ord5790
ord9693
ord4494
ord3055
ord14590
ord7923
ord14596
ord6877
ord11717
ord13703
ord5935
ord2682
ord12124
ord3941
ord3296
ord3371
ord3372
ord12168
ord1002
ord7441
ord5249
ord5549
ord5760
ord9350
ord5525
ord5252
ord5411
ord5228
ord7722
ord7723
ord7712
ord5409
ord8219
ord9209
ord1513
ord1511
ord2070
ord8182
ord5884
ord7495
ord9235
ord12173
ord462
ord7109
ord1113
ord2304
ord11038
ord12131
ord6218
ord13752
ord2760
ord4570
ord13062
ord5210
ord13293
ord450
ord2520
ord6812
ord6486
ord2522
ord1523
ord2256
ord7649
ord9467
ord12088
ord12123
ord6566
ord6876
ord2681
ord1468
ord10048
ord10047
ord11146
ord9011
ord11122
ord11746
ord8913
ord8923
ord10509
ord11118
ord9526
ord9991
ord9986
ord9514
ord9524
ord9509
ord11279
ord11276
ord8304
ord991
ord7432
ord4664
ord290
ord5765
ord7501
ord9212
ord9979
ord11743
ord9363
ord11139
ord11138
ord10721
ord10251
ord10431
ord5368
ord5377
ord14511
ord4088
ord4138
ord1128
ord12093
ord12964
ord2718
ord9484
ord4703
ord12660
ord12418
ord2558
ord13352
ord2843
ord7655
ord8395
ord11252
ord12575
ord5577
ord12786
ord9197
ord11267
ord11024
ord10976
ord3857
ord9081
ord6199
ord5609
ord2858
ord13832
ord14065
ord481
ord7121
ord3849
ord14077
ord7306
ord12583
ord14308
ord8479
ord9208
ord8974
ord14216
ord11893
ord13007
ord2801
ord8461
ord7676
ord5271
ord8024
ord7999
ord7946
ord4590
ord1473
ord996
ord6861
ord1915
ord6533
ord2205
ord2322
ord2307
ord2303
ord953
ord8470
ord7653
ord8386
ord12247
ord10433
ord12928
ord12865
ord7997
ord4459
ord8324
ord5357
ord10147
ord10144
ord2486
ord12542
ord12541
ord14589
ord7922
ord14595
ord9398
ord4152
ord10840
ord4090
ord1854
ord1240
ord634
ord1306
ord14588
ord7941
ord4374
ord758
ord10402
ord11495
ord12081
ord4587
ord5369
ord8209
ord9352
ord5955
ord4495
ord2557
ord5938
ord13707
ord5939
ord13709
ord13700
ord5934
ord12027
ord2034
ord11983
ord11982
ord1866
ord14466
ord12531
ord8000
ord14667
ord6348
ord14669
ord6350
ord14668
ord6349
ord13248
ord13911
ord1788
ord6130
ord8462
ord1072
ord5034
ord366
ord3852
ord5918
ord12239
ord8217
ord12251
ord5039
ord12219
ord11015
ord14234
ord5763
ord5033
ord10250
ord3846
ord5921
ord3174
ord285
ord3009
ord14320
ord2132
ord789
ord11685
ord9303
ord9424
ord9176
ord11801
ord3844
ord2345
ord2750
ord8832
ord11503
ord11796
ord9719
ord9204
ord11509
ord5747
ord2060
ord7918
ord12103
ord9238
ord9214
ord11431
ord2246
ord14591
ord8399
ord12178
ord8464
ord1777
ord12461
ord3838
ord1526
ord9210
ord1111
ord9040
ord11396
ord10472
ord4092
ord3403
ord3404
ord3164
ord3833
ord3265
ord7450
ord6489
ord10287
ord3882
ord9226
ord2409
comctl32
InitCommonControlsEx
_TrackMouseEvent
shlwapi
PathRemoveFileSpecW
gdiplus
GdipCloneBrush
GdiplusShutdown
GdipDeleteBrush
GdipCreateSolidFill
GdipSetSolidFillColor
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImage
GdipDrawImageRectRect
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipCreateFont
GdipDeleteFont
GdipDrawString
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImagePointRectI
GdipCreateFontFromDC
GdipCreateFontFromLogfontW
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipFree
GdipAlloc
msvcp140
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$ctype@D@std@@2V0locale@2@A
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?setf@ios_base@std@@QAEHHH@Z
?fail@ios_base@std@@QBE_NXZ
?eof@ios_base@std@@QBE_NXZ
??Bios_base@std@@QBE_NXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?is@?$ctype@D@std@@QBE_NFD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
??7ios_base@std@@QBE_NXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?uncaught_exception@std@@YA_NXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Xlength_error@std@@YAXPBD@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
libcef
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_list_value_create
cef_v8value_create_function
cef_v8value_create_string
cef_process_message_create
cef_dictionary_value_create
cef_window_create_top_level
cef_browser_view_create
cef_browser_host_create_browser
cef_command_line_get_global
cef_string_map_free
cef_string_map_alloc
cef_api_hash
cef_quit_message_loop
cef_do_message_loop_work
cef_shutdown
cef_initialize
cef_execute_process
cef_post_task
cef_currently_on
cef_string_list_free
cef_string_list_alloc
cef_string_userfree_utf16_free
cef_log
cef_string_utf16_cmp
cef_string_utf16_set
cef_string_utf16_to_utf8
cef_string_utf8_to_utf16
cef_string_utf16_clear
cef_string_utf8_clear
cef_string_multimap_alloc
cef_string_multimap_free
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
dbghelp
MiniDumpWriteDump
vcruntime140
__std_terminate
memset
__CxxFrameHandler3
memcmp
memcpy
memmove
__std_exception_copy
__std_exception_destroy
_CxxThrowException
_purecall
__RTDynamicCast
memchr
_except_handler4_common
__current_exception_context
__current_exception
api-ms-win-crt-heap-l1-1-0
free
_recalloc
calloc
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
__p___argc
_beginthreadex
_wassert
_controlfp_s
terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_set_app_type
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
_get_stream_buffer_pointers
__p__commode
_set_fmode
__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s
fclose
fflush
fgetc
fgetpos
fputc
fread
__stdio_common_vsprintf
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
api-ms-win-crt-string-l1-1-0
wcscpy_s
strlen
wcscat_s
wcslen
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_wsplitpath
_lock_file
api-ms-win-crt-time-l1-1-0
_time64
_localtime64
api-ms-win-crt-utility-l1-1-0
srand
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 387KB - Virtual size: 386KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ