e2119ba0374abcc53f960b7eae7ff6e410222db9ca529c2c1e14bb1e06be3340

Sharing

Copy URL Twitter E-mail

General

Target

e2119ba0374abcc53f960b7eae7ff6e410222db9ca529c2c1e14bb1e06be3340
Size

1.5MB
MD5

df2ef5bd06660aad7618771aeb13dd71
SHA1

c6325f5400ba1adca8a3e8b500352b9d5459f3c6
SHA256

e2119ba0374abcc53f960b7eae7ff6e410222db9ca529c2c1e14bb1e06be3340
SHA512

167ef7fa910d8186ea03f44335db422d7d77da079c2c78a57499c142c4fcaa28c7d01df0d4d1b3809f2b0675d8f9009340388f117b1f7476e82da0140e018caf
SSDEEP

24576:jEUnhn06V5sqjnhMgeiCl7G0nehbGZpbD:7n0aDmg27RnWGj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2119ba0374abcc53f960b7eae7ff6e410222db9ca529c2c1e14bb1e06be3340

Files

e2119ba0374abcc53f960b7eae7ff6e410222db9ca529c2c1e14bb1e06be3340
.exe windows:5 windows x86

4627250bf6dbcbee77063358a9f4e1e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcp120

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_BADOFF@std@@3_JB
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ

msvcr120

_initterm
_wcmdln
_fmode
_commode
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
?terminate@@YAXXZ
_except_handler4_common
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
_initterm_e
memset
??_V@YAXPAX@Z
memcpy
__setusermatherr
_configthreadlocale
_cexit
_exit
exit
__set_app_type
__wgetmainargs
__crtGetShowWindowMode
_XcptFilter
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
??1type_info@@UAE@XZ
_wtoi
_purecall
??2@YAPAXI@Z
memmove
??3@YAXPAX@Z
_amsg_exit
_CxxThrowException
__CxxFrameHandler3

libcef

cef_string_utf16_cmp
cef_string_utf16_clear
cef_log
cef_string_utf8_to_utf16
cef_string_utf16_set
cef_string_userfree_utf16_free
cef_string_list_alloc
cef_string_list_free
cef_v8value_create_int
cef_v8value_create_function
cef_execute_process
cef_enable_highdpi_support
cef_api_hash
cef_string_list_size
cef_string_list_value
cef_string_list_append
cef_string_map_size
cef_string_map_key
cef_string_map_value
cef_string_map_append
cef_string_multimap_size
cef_string_multimap_key
cef_string_multimap_value
cef_string_multimap_append
cef_string_map_alloc
cef_string_map_free
cef_string_multimap_alloc
cef_string_multimap_free

kernel32

EncodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
SetLastError
DecodePointer

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.2MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4627250bf6dbcbee77063358a9f4e1e0

Headers

DLL Characteristics

File Characteristics

Imports

msvcp120

msvcr120

libcef

kernel32

Sections

.text Size: 176KB - Virtual size: 175KB

.rdata Size: 25KB - Virtual size: 25KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 90KB - Virtual size: 90KB

.reloc Size: 1.2MB - Virtual size: 1.8MB

.text
Size: 176KB - Virtual size: 175KB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 90KB - Virtual size: 90KB

.reloc
Size: 1.2MB - Virtual size: 1.8MB