GetBrowserService
iytiytgw
weycsaf
wtqwtyesxfa
wtsxczfa
Static task
static1
1 signatures
General
-
Target
QiDianBrowserMgr.dll
-
Size
944KB
-
MD5
0fa290a3ae494edb551f2f6c6ea5d21b
-
SHA1
81f443f09b3f3dca95896b6d0fa4e73684147887
-
SHA256
fb2b19de25f9ecb7405b44be84078887199b9e952127d4e05afaf06c55a28c0d
-
SHA512
24b155ae12097bfb4fd84161b15910dfac31ffc38579f6fa5f9251bc00a51cd53872f1a2607b19dde1757db803d23180dd13b2fcc7ac07430be3f0b54bb389bb
-
SSDEEP
24576:swxsKlUcIVHVlrHdos5ki16oKYw4zvGkVvJmV6BOmcsj:swxxlaVlrHdosF63YtF9Jms3cY
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource QiDianBrowserMgr.dll
Files
-
QiDianBrowserMgr.dll.dll windows x86
a1ccebdf1c7097dcb9dc388705391b64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleW
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
VirtualAlloc
VirtualFree
GetModuleHandleW
GetProcAddress
GetModuleFileNameA
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ReadFile
ExitProcess
GetModuleHandleExW
HeapFree
SetFilePointerEx
GetStdHandle
GetFileType
HeapAlloc
GetConsoleMode
ReadConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
CreateFileW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetStringTypeW
HeapSize
HeapReAlloc
SetEndOfFile
DecodePointer
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
crypt32
CryptStringToBinaryA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
user32
GetWindow
shell32
SHGetFolderPathW
Exports
Exports
Sections
.text Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 795KB - Virtual size: 796KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ