83aea02252ea00c7810506c5d6d024919b75a4b1bdf3bf32fc9b332fdb16d08d

Sharing

Copy URL Twitter E-mail

General

Target

83aea02252ea00c7810506c5d6d024919b75a4b1bdf3bf32fc9b332fdb16d08d
Size

2.0MB
MD5

bf9223fa87f79136fbde4f1b1988b361
SHA1

46d6bbe531f80ea262ca97aa9f158760ea51a57e
SHA256

83aea02252ea00c7810506c5d6d024919b75a4b1bdf3bf32fc9b332fdb16d08d
SHA512

0a7ce25091b3efc70ab5818f2c7d7936380e149ef2a9a0922da415d23093dd2749c670f7c64ee22f0b061f11b4a91f0d4b7a73ddd7548a8e6a11d28b453e7686
SSDEEP

49152:zQHbdlttB/4LBj0Ot5vkdTKL/NgOhbTmU0lsiO+zY4RMV:zQh5BwLBj0OttkdTKLuONTmU0lsiO+z6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83aea02252ea00c7810506c5d6d024919b75a4b1bdf3bf32fc9b332fdb16d08d

Files

83aea02252ea00c7810506c5d6d024919b75a4b1bdf3bf32fc9b332fdb16d08d
.exe windows:6 windows x86

d3acff8461ee33ed8ad8af181ca13930

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libcef

cef_string_utf16_set
cef_string_utf8_to_utf16
cef_string_ascii_to_utf16
cef_string_utf8_clear
cef_string_multimap_free
cef_string_multimap_alloc
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_string_map_free
cef_string_map_alloc
cef_api_hash
cef_cookie_manager_create_manager
cef_log
cef_v8value_create_int
cef_string_utf16_clear
cef_v8value_create_string
cef_v8value_create_function
cef_process_message_create
cef_request_context_create_context
cef_value_create
cef_browser_host_create_browser
cef_string_utf16_cmp
cef_string_utf16_to_utf8
cef_v8context_get_current_context
cef_string_userfree_utf16_free
cef_string_list_alloc
cef_string_list_free
cef_register_extension
cef_execute_process
cef_initialize
cef_shutdown
cef_quit_message_loop

kernel32

GetFileType
GetSystemInfo
VirtualAlloc
VirtualQuery
GetStdHandle
GetStartupInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetConsoleCP
SetStdHandle
SetFilePointerEx
GetTimeZoneInformation
GetStringTypeW
ReadConsoleW
OutputDebugStringW
IsValidLocale
EnumSystemLocalesW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
GetSystemTimeAsFileTime
lstrlenA
HeapQueryInformation
GetConsoleMode
CreateThread
ExitThread
CreateMutexW
GetLastError
GetCurrentThreadId
FindFirstFileW
FindNextFileW
FindClose
SizeofResource
LockResource
LoadResource
FindResourceW
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
FreeResource
GetVersionExW
GetNativeSystemInfo
GetModuleFileNameW
GetPrivateProfileStringW
SetEnvironmentVariableW
lstrcpyW
DeleteFileW
CloseHandle
CreateProcessW
OpenProcess
GetPriorityClass
TerminateProcess
GetLocalTime
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
LeaveCriticalSection
InitializeCriticalSectionEx
RaiseException
GetModuleHandleExW
ExitProcess
RtlUnwind
IsProcessorFeaturePresent
IsDebuggerPresent
GetCommandLineW
FindResourceExW
GetUserDefaultLCID
VirtualProtect
Sleep
GetProfileIntW
GetTickCount
HeapSize
EnterCriticalSection
DecodePointer
SearchPathW
GetWindowsDirectoryW
GetTempPathW
GetTempFileNameW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
VerifyVersionInfoW
VerSetConditionMask
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
CreateFileW
SetErrorMode
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryW
GlobalFlags
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalGetAtomNameW
FileTimeToSystemTime
LocalAlloc
FileTimeToLocalFileTime
GetCurrentProcessId
WritePrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SetThreadPriority
WaitForSingleObject
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetSystemDirectoryW
InitializeCriticalSectionAndSpinCount
EncodePointer
OutputDebugStringA
lstrcmpW
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetCurrentThread
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
DeleteCriticalSection
GlobalSize
GlobalAlloc
SetLastError

user32

GetComboBoxInfo
GetWindowRgn
DrawIcon
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
LockWindowUpdate
SetRect
SetCursorPos
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawIconEx
DrawFocusRect
DrawFrameControl
DrawEdge
MapVirtualKeyW
GetKeyNameTextW
MonitorFromPoint
UnionRect
EnableScrollBar
UpdateLayeredWindow
IsMenu
IsRectEmpty
SetMenuDefaultItem
GetMenuDefaultItem
NotifyWinEvent
MessageBeep
SetWindowRgn
GetSystemMenu
GetAsyncKeyState
TrackMouseEvent
EnumDisplayMonitors
CharUpperW
GetMenuItemInfoW
DeleteMenu
CopyImage
SetCapture
WaitMessage
RealChildWindowFromPoint
GetSysColorBrush
WindowFromPoint
ReuseDDElParam
UnpackDDElParam
LoadImageW
DestroyIcon
SetRectEmpty
InsertMenuItemW
DestroyMenu
CreatePopupMenu
TranslateAcceleratorW
LoadAcceleratorsW
ReleaseCapture
IsIconic
IntersectRect
SendDlgItemMessageA
GetDesktopWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IsDialogMessageW
SetWindowTextW
CheckDlgButton
LoadMenuW
DrawStateW
IsWindowEnabled
ShowOwnedPopups
GetActiveWindow
MapDialogRect
ClientToScreen
EndPaint
BeginPaint
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
RegisterWindowMessageW
DefWindowProcW
FindWindowW
SetWindowsHookExW
GetMessageW
TranslateMessage
PostQuitMessage
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
DestroyCursor
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
GetDoubleClickTime
InvertRect
UnregisterClassW
ReleaseDC
HideCaret
GetIconInfo
GetNextDlgGroupItem
PostThreadMessageW
CopyIcon
ModifyMenuW
CharUpperBuffW
FillRect
RegisterClipboardFormatW
InflateRect
FrameRect
OffsetRect
GetWindowDC
LoadBitmapW
SetWindowPos
GetParent
GetWindowThreadProcessId
WaitForInputIdle
IsZoomed
BringWindowToTop
SetActiveWindow
DispatchMessageW
UnhookWindowsHookEx
CallNextHookEx
EnableWindow
GetWindowRect
GetSystemMetrics
InvalidateRect
SetTimer
GetKeyState
SendMessageW
KillTimer
GetCursorPos
PtInRect
GetClientRect
SetWindowLongW
GetWindowLongW
SetLayeredWindowAttributes
IsWindowVisible
LoadIconW
SystemParametersInfoW
SetClassLongW
GetClassLongW
SetParent
MoveWindow
ShowWindow
SetCursor
LoadCursorW
PostMessageW
GetSysColor

gdi32

GetObjectW
CreateHatchBrush
CreatePen
CreateRectRgn
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
SetTextColor
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextMetricsW
CreateRoundRectRgn
CreateDIBSection
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
CreatePolygonRgn
Polygon
Polyline
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
GetRgnBox
OffsetRgn
Rectangle
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RoundRect
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExW
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
SetPixelV
GetTextFaceW
SetBkColor
CreateBitmap
GetDeviceCaps
CreateDCW
CopyMetaFileW
GetTextExtentPoint32W
CreateFontW
DeleteDC
GetStockObject
CreateSolidBrush
CreatePatternBrush
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateFontIndirectW
CreateCompatibleDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

SHAppBarMessage
SHFileOperationW
ShellExecuteW
DragQueryFileW
DragFinish
SHGetFileInfoW
SHBrowseForFolderW
SHGetFolderPathW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW

comctl32

_TrackMouseEvent

shlwapi

PathFindExtensionW
PathFindFileNameW
UrlUnescapeW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW

uxtheme

GetWindowTheme
GetThemeSysColor
GetThemePartSize
GetCurrentThemeName
GetThemeColor
CloseThemeData
OpenThemeData
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
DrawThemeParentBackground
DrawThemeText
IsAppThemed

ole32

OleGetClipboard
CreateStreamOnHGlobal
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
CoInitializeEx
CoDisconnectObject
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc

oleaut32

SysAllocString
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringLen
VariantCopy
VarBstrFromDate
LoadTypeLi
SysAllocStringByteLen
SysFreeString

gdiplus

GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipLoadImageFromStream
GdipDrawString
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteBrush
GdipCreateSolidFill
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipSetTextRenderingHint
GdipDrawImageRectRectI
GdipDrawImageI
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromStream
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipGetImageHeight
GdipGetImageWidth
GdipCreateFromHDC
GdipDeleteGraphics
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipDrawImageRectRect
GdipResetWorldTransform

wininet

InternetCrackUrlW
InternetCanonicalizeUrlW
InternetOpenW
InternetCloseHandle
InternetConnectW
HttpQueryInfoW
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetGetConnectedState
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 375KB - Virtual size: 375KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3acff8461ee33ed8ad8af181ca13930

Headers

DLL Characteristics

File Characteristics

Imports

libcef

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

wininet

oleacc

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 375KB - Virtual size: 375KB

.data Size: 28KB - Virtual size: 58KB

.rsrc Size: 1.5MB - Virtual size: 1.5MB

.reloc Size: 133KB - Virtual size: 133KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 375KB - Virtual size: 375KB

.data
Size: 28KB - Virtual size: 58KB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 133KB - Virtual size: 133KB