Static task
static1
Behavioral task
behavioral1
Sample
a3f303c299f81fbde3f6bb1fe7b80e0a7b7e267960ab39b9cf86309cb3718797.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a3f303c299f81fbde3f6bb1fe7b80e0a7b7e267960ab39b9cf86309cb3718797.exe
Resource
win10v2004-20230703-en
General
-
Target
a3f303c299f81fbde3f6bb1fe7b80e0a7b7e267960ab39b9cf86309cb3718797
-
Size
731KB
-
MD5
cf432afd8a4f392969c73ee698717d7d
-
SHA1
784178edd4766daa8feec5cf6cd4fbb9b567a5e4
-
SHA256
a3f303c299f81fbde3f6bb1fe7b80e0a7b7e267960ab39b9cf86309cb3718797
-
SHA512
73c080c357b7b54ec0f566086de38ceb6007b1548a90842b2808eca1f453c7547afe343feb0cd8507b79820394ff1c679240d8b8a2b1cd0595f5c5f872dd19a6
-
SSDEEP
12288:iS3nI3tm2/vG2mj1Qt8Q4neQcrJJh9HNCgmMKDvQnL/AF06ytSWRB:iyIQ28e1rJD9tCghKEnwC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3f303c299f81fbde3f6bb1fe7b80e0a7b7e267960ab39b9cf86309cb3718797
Files
-
a3f303c299f81fbde3f6bb1fe7b80e0a7b7e267960ab39b9cf86309cb3718797.exe windows x86
a6a86371c188f5269202c9c586830766
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
libcef
cef_string_map_value
cef_string_map_append
cef_string_multimap_size
cef_string_multimap_key
cef_string_multimap_value
cef_string_multimap_append
cef_string_multimap_alloc
cef_string_multimap_free
cef_string_list_copy
cef_string_map_size
cef_quit_message_loop
cef_run_message_loop
cef_shutdown
cef_initialize
cef_execute_process
cef_string_list_free
cef_string_list_alloc
cef_string_userfree_utf16_free
cef_log
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_string_utf16_cmp
cef_command_line_create
cef_string_map_key
cef_string_map_free
cef_string_map_alloc
cef_browser_host_create_browser
cef_api_hash
cef_string_utf16_set
cef_string_utf8_clear
cef_string_utf16_to_utf8
cef_string_utf8_to_utf16
cef_string_utf16_clear
kernel32
RtlUnwind
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
FlushFileBuffers
CreateFileW
SetStdHandle
FreeEnvironmentStringsW
IsProcessorFeaturePresent
TerminateProcess
FreeLibrary
LoadLibraryExW
GetModuleHandleExW
HeapValidate
GetSystemInfo
ExitProcess
GetStdHandle
WriteFile
GetFileType
WriteConsoleW
HeapQueryInformation
SetFilePointerEx
GetConsoleMode
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindFirstFileExW
FindNextFileW
WideCharToMultiByte
MultiByteToWideChar
FindClose
LeaveCriticalSection
GetModuleFileNameW
EnterCriticalSection
CreateDirectoryW
GetCommandLineW
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
SetLastError
HeapFree
GetConsoleCP
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetStartupInfoW
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
CloseHandle
GetCPInfo
GetLocaleInfoW
LCMapStringW
EncodePointer
GetProcAddress
GetModuleHandleW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
GetEnvironmentStringsW
TlsAlloc
SwitchToThread
CreateEventW
InitializeCriticalSectionAndSpinCount
GetStringTypeW
OutputDebugStringW
IsDebuggerPresent
user32
SetWindowPos
PostMessageW
InvalidateRect
GetClientRect
SetWindowLongW
LoadIconW
MoveWindow
SetWindowPlacement
GetSystemMetrics
ShowWindow
GetWindowPlacement
IsWindowVisible
GetWindowRect
GetWindowLongW
PostQuitMessage
OffsetRect
SetTimer
KillTimer
SystemParametersInfoW
UpdateWindow
SendMessageW
SetWindowTextW
CopyRect
shell32
Shell_NotifyIconW
SHGetSpecialFolderPathW
ShellExecuteW
ole32
CoUninitialize
CoInitialize
OleInitialize
duilib
??BCDuiString@DuiLib@@QBEPB_WXZ
??HCDuiString@DuiLib@@QBE?AV01@PB_W@Z
?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?SetResourcePath@CPaintManagerUI@DuiLib@@SAXPB_W@Z
?Navigate2@CWebBrowserUI@DuiLib@@QAEXPB_W@Z
?ShowModal@CWindowWnd@DuiLib@@QAEIXZ
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
??1CDialogBuilder@DuiLib@@QAE@XZ
??0CDuiString@DuiLib@@QAE@XZ
?GetHWND@CWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?ResizeClient@CWindowWnd@DuiLib@@QAEXHH@Z
??0CDialogBuilder@DuiLib@@QAE@XZ
?GetInstance@CPaintManagerUI@DuiLib@@SAPAUHINSTANCE__@@XZ
??0WindowImplBase@DuiLib@@QAE@XZ
??1WindowImplBase@DuiLib@@UAE@XZ
?InitWindow@WindowImplBase@DuiLib@@UAEXXZ
??0CDuiString@DuiLib@@QAE@PB_WH@Z
??0CDuiString@DuiLib@@QAE@ABV01@@Z
??1CDuiString@DuiLib@@QAE@XZ
??8CDuiString@DuiLib@@QBE_NPB_W@Z
??BCWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?ShowWindow@CWindowWnd@DuiLib@@QAEX_N0@Z
?Close@CWindowWnd@DuiLib@@UAEXI@Z
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?Notify@WindowImplBase@DuiLib@@UAEXAAUtagTNotifyUI@2@@Z
?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ
?OnClick@WindowImplBase@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?ResponseDefaultKeyEvent@WindowImplBase@DuiLib@@MAEJI@Z
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnWindowPosChanging@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSysCommand@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z
?HandleCustomMessage@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
?messageMap@CNotifyPump@DuiLib@@1UDUI_MSGMAP@2@B
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
shlwapi
PathFileExistsW
Sections
.text Size: 382KB - Virtual size: 381KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ