b44b2efbb69d4687ed4edb6505dc73fc8ee753fe4bb4841bee90cf178dad3d78

Sharing

Copy URL Twitter E-mail

General

Target

b44b2efbb69d4687ed4edb6505dc73fc8ee753fe4bb4841bee90cf178dad3d78
Size

375KB
MD5

e183fc09504cf9f3c21d42e9184ae49c
SHA1

38ad57b16e058602b42c3a5507184e4faecb5003
SHA256

b44b2efbb69d4687ed4edb6505dc73fc8ee753fe4bb4841bee90cf178dad3d78
SHA512

278fd7d74f7c4e131a6ac7f78feec3334d238dc8974f16b73e51c37db0d76e123d01f812bcaa5dec3fd5687b19a15702e83bf96afe4c236b09296a7310a37cba
SSDEEP

6144:ijhj8OFHufVvL7dEx7/u3KugRm06SvZln2QMKCAOQMBgxKj4hR0Qy:ijhj8OFOfVvL2xu3KugMpWbRMXJaO4hn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b44b2efbb69d4687ed4edb6505dc73fc8ee753fe4bb4841bee90cf178dad3d78

Files

b44b2efbb69d4687ed4edb6505dc73fc8ee753fe4bb4841bee90cf178dad3d78
.exe windows:5 windows x86 arch:x86

a5a7c3a88abee18d6ce7c88c24e3faaa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libcef

cef_string_multimap_free
cef_string_multimap_alloc
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_string_utf16_cmp
cef_string_map_free
cef_string_map_alloc
cef_api_hash
cef_enable_highdpi_support
cef_execute_process
cef_string_list_free
cef_string_list_alloc
cef_string_userfree_utf16_free
cef_string_utf16_clear
cef_string_utf16_set

kernel32

WriteConsoleW
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
HeapReAlloc
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
CloseHandle
GetFileType
HeapAlloc
HeapFree
GetACP
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
LoadLibraryExW
FreeLibrary
GetLastError
RaiseException
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringW
GetProcAddress
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
MultiByteToWideChar
DecodePointer
EncodePointer
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateFileW

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5a7c3a88abee18d6ce7c88c24e3faaa

Headers

DLL Characteristics

File Characteristics

Imports

libcef

kernel32

Sections

.text Size: 229KB - Virtual size: 228KB

.rdata Size: 74KB - Virtual size: 73KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 35KB - Virtual size: 34KB

.reloc Size: 17KB - Virtual size: 16KB

.text
Size: 229KB - Virtual size: 228KB

.rdata
Size: 74KB - Virtual size: 73KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 35KB - Virtual size: 34KB

.reloc
Size: 17KB - Virtual size: 16KB