Static task
static1
Behavioral task
behavioral1
Sample
5866a178825b9fe445f7f8fa841f214d24a2ed98660aac729f5cd62ac5ec6908.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5866a178825b9fe445f7f8fa841f214d24a2ed98660aac729f5cd62ac5ec6908.exe
Resource
win10v2004-20230915-en
General
-
Target
5866a178825b9fe445f7f8fa841f214d24a2ed98660aac729f5cd62ac5ec6908
-
Size
1001KB
-
MD5
0f0a52221fb67483e9d1d839170bf052
-
SHA1
294df088583cc1b10ecde25bf24ec334c6a105c6
-
SHA256
5866a178825b9fe445f7f8fa841f214d24a2ed98660aac729f5cd62ac5ec6908
-
SHA512
d038bad0a00254d30b17557012b14eb9014e646271e1770e6a76b889e181ef38cfddf7a76a6a8dac5fe8fb935ebbd1f432dc88bb05666d04fd516cef815ba796
-
SSDEEP
12288:Jj+s4YXgpEP1x4avDqmUabFZUkviEisWhB3E/cCBu/ubLWysBrf3iQ:Jyq1x4avDqLEisUB3E3uL3iQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5866a178825b9fe445f7f8fa841f214d24a2ed98660aac729f5cd62ac5ec6908
Files
-
5866a178825b9fe445f7f8fa841f214d24a2ed98660aac729f5cd62ac5ec6908.exe windows:6 windows x86
ee21cf8bbf667560783f90e045bd2ebc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
libcef
cef_stream_reader_create_for_handler
cef_stream_reader_create_for_data
cef_stream_reader_create_for_file
cef_print_settings_create
cef_menu_model_create
cef_post_data_element_create
cef_string_map_free
cef_string_map_alloc
cef_media_router_get_global
cef_cookie_manager_get_global_manager
cef_stream_writer_create_for_handler
cef_stream_writer_create_for_file
cef_image_create
cef_response_create
cef_post_data_create
cef_create_context_shared
cef_request_context_create_context
cef_request_context_get_global_context
cef_drag_data_create
cef_urlrequest_create
cef_request_create
cef_string_multimap_free
cef_string_multimap_alloc
cef_browser_host_create_browser_sync
cef_browser_host_create_browser
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_task_runner_get_for_thread
cef_task_runner_get_for_current_thread
cef_value_create
cef_dictionary_value_create
cef_binary_value_create
cef_v8value_create_promise
cef_v8value_create_function
cef_v8value_create_array_buffer
cef_v8value_create_array
cef_v8value_create_object
cef_v8value_create_string
cef_v8value_create_date
cef_v8value_create_double
cef_v8value_create_uint
cef_v8value_create_int
cef_v8value_create_bool
cef_v8value_create_null
cef_v8value_create_undefined
cef_string_list_free
cef_string_list_alloc
cef_v8context_in_context
cef_v8context_get_entered_context
cef_v8context_get_current_context
cef_process_message_create
cef_list_value_create
cef_string_userfree_utf16_free
cef_string_utf8_to_utf16
cef_string_utf16_cmp
cef_string_utf16_set
cef_string_utf16_clear
kernel32
LCMapStringEx
WriteConsoleW
CreateFileW
CloseHandle
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapSize
SetFilePointerEx
GetFileSizeEx
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
OutputDebugStringW
GetTimeZoneInformation
SetConsoleCtrlHandler
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileType
HeapAlloc
HeapFree
GetCurrentThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
GetLastError
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
RtlUnwind
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
FormatMessageA
WideCharToMultiByte
LocalFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
IsProcessorFeaturePresent
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
Sections
.text Size: 746KB - Virtual size: 746KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ