07b1cc92b7f9cce19bec1356461ee0faae4d5e4fcb29c56faa593836e0ab59db

Sharing

Copy URL Twitter E-mail

General

Target

07b1cc92b7f9cce19bec1356461ee0faae4d5e4fcb29c56faa593836e0ab59db
Size

6.0MB
MD5

735990b8bf117451a18dfe8b20e55a11
SHA1

1da0c9d0f11ff6d590e1e5b23c1a153871267b36
SHA256

07b1cc92b7f9cce19bec1356461ee0faae4d5e4fcb29c56faa593836e0ab59db
SHA512

cb3cea6d9a7c6ada3212088f8c47754d25b241d21e5548f1a1f44cf81150e3431cc2fcc4576c2c12bdc144d02b74c2c71fe2f83e890eed92a46fdc873d941bb4
SSDEEP

98304:OwmpUIRHbfkMaTh5/tx9bG0HzdrcHwU1FNCNGJmyyoe9M7+smzoXL7:OzUIlfahtO+a1Mj9M7+smk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07b1cc92b7f9cce19bec1356461ee0faae4d5e4fcb29c56faa593836e0ab59db

Files

07b1cc92b7f9cce19bec1356461ee0faae4d5e4fcb29c56faa593836e0ab59db
.exe windows:6 windows x86 arch:x86

5c2c391f387e5729dba587e7f49bc9a4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

libcef

cef_api_hash
cef_browser_host_create_browser
cef_v8value_create_function
cef_process_message_create
cef_log
cef_string_map_alloc
cef_string_list_copy
cef_string_multimap_free
cef_string_multimap_alloc
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_string_map_free
cef_enable_highdpi_support
cef_shutdown
cef_initialize
cef_execute_process
cef_post_task
cef_string_list_free
cef_string_list_alloc
cef_string_userfree_utf16_free
cef_string_utf8_clear
cef_string_utf8_to_utf16
cef_string_utf16_to_utf8
cef_string_utf16_clear
cef_string_utf16_set
cef_string_utf16_cmp

winmm

PlaySoundW

kernel32

ResetEvent
GlobalLock
GlobalUnlock
MulDiv
FreeResource
SystemTimeToFileTime
GetTickCount
GetVersion
EncodePointer
GetModuleHandleA
LoadLibraryExW
LoadLibraryA
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
GlobalSize
SetThreadPriority
GetCurrentThread
lstrcmpA
GetPrivateProfileIntW
OpenFileMappingW
FindFirstFileW
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
lstrcmpiW
GlobalGetAtomNameW
InitializeCriticalSection
GlobalReAlloc
GlobalHandle
LocalReAlloc
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
FileTimeToSystemTime
GetCurrentDirectoryW
FileTimeToLocalFileTime
GetFileAttributesW
GlobalFree
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
FindResourceExW
GetWindowsDirectoryW
SearchPathW
GetProfileIntW
GetTempFileNameW
GetUserDefaultLCID
WaitForSingleObjectEx
UnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
TryEnterCriticalSection
InterlockedCompareExchange
GetStdHandle
GetEnvironmentVariableW
GetFileType
GetModuleHandleExW
SwitchToFiber
DeleteFiber
CreateFiber
ConvertFiberToThread
ConvertThreadToFiber
FindNextFileW
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
GetSystemTime
QueryPerformanceFrequency
FindFirstFileExW
SetUnhandledExceptionFilter
SetFilePointerEx
AreFileApisANSI
SwitchToThread
GetExitCodeThread
GetNativeSystemInfo
GetStringTypeW
QueueUserWorkItem
GetCPInfo
LCMapStringW
ReleaseMutex
GlobalAlloc
GetFileAttributesExW
ResumeThread
CreateFileW
CreateMutexW
SetErrorMode
CreateDirectoryW
GetComputerNameA
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleHandleW
GetCurrentThreadId
CopyFileW
DeleteFileW
LocalAlloc
OutputDebugStringW
FormatMessageW
SetConsoleCtrlHandler
GetExitCodeProcess
GetProcessTimes
SetProcessWorkingSetSize
GetSystemTimeAsFileTime
lstrcpyW
FreeLibrary
CreateProcessW
GetCurrentProcessId
GetProcAddress
Module32FirstW
LoadLibraryW
GetSystemInfo
Process32FirstW
lstrcatW
K32GetProcessMemoryInfo
Process32NextW
Sleep
GetPrivateProfileStringW
CreateToolhelp32Snapshot
OpenProcess
GetSystemDirectoryW
GetVersionExW
GetTempPathW
GetModuleFileNameW
TerminateProcess
WritePrivateProfileStringW
GetCurrentProcess
SleepEx
SetEvent
CreateEventW
CreateWaitableTimerW
VerifyVersionInfoW
VerSetConditionMask
QueueUserAPC
CloseHandle
TerminateThread
WaitForSingleObject
GetQueuedCompletionStatus
WaitForMultipleObjects
SetLastError
TlsSetValue
SetWaitableTimer
CreateIoCompletionPort
FormatMessageA
TlsFree
TlsGetValue
WideCharToMultiByte
LocalFree
TlsAlloc
PostQueuedCompletionStatus
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
GetProcessHeap
HeapAlloc
HeapReAlloc
MultiByteToWideChar
HeapSize
HeapFree
OutputDebugStringA
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionEx
MapViewOfFile
CreateFileMappingW
GetLocalTime
GetFileInformationByHandle
UnmapViewOfFile
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
CreateThread
ExitThread
FreeLibraryAndExitThread
ExitProcess
GetDriveTypeW
PeekNamedPipe
GetCommandLineA
GetCommandLineW
HeapQueryInformation
VirtualAlloc
VirtualQuery
SetStdHandle
SetEnvironmentVariableW
GetConsoleCP
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
CreateTimerQueue
SignalObjectAndWait
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
FindClose

user32

GetWindowRgn
GetProcessWindowStation
GetUserObjectInformationW
OpenClipboard
LoadImageW
LockWindowUpdate
BringWindowToTop
SetCursorPos
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
LoadAcceleratorsW
MapVirtualKeyW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawIconEx
DrawFocusRect
DrawFrameControl
DrawEdge
PostThreadMessageW
DestroyIcon
MonitorFromPoint
UnionRect
EnableScrollBar
IsRectEmpty
SetMenuDefaultItem
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
IntersectRect
MessageBeep
DeleteMenu
GetSystemMenu
IsZoomed
TrackMouseEvent
MapDialogRect
GetAsyncKeyState
RealChildWindowFromPoint
SendDlgItemMessageA
CopyImage
EnumDisplayMonitors
SetRectEmpty
GetSysColorBrush
SetLayeredWindowAttributes
InflateRect
GetMenuItemInfoW
DestroyMenu
CharUpperW
RegisterClipboardFormatW
ShowOwnedPopups
PostQuitMessage
TranslateMessage
GetMessageW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuState
GetMenuStringW
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
UnhookWindowsHookEx
GetWindow
GetLastActivePopup
GetTopWindow
GetClassLongW
PtInRect
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetComboBoxInfo
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
EndPaint
BeginPaint
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
SetMenu
GetMenu
GetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsMenu
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
LoadBitmapW
DrawStateW
DestroyCursor
DrawIcon
InvertRect
HideCaret
GetNextDlgGroupItem
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
UnregisterHotKey
LoadMenuW
SendMessageTimeoutW
GetSubMenu
GetCursorPos
FillRect
CopyRect
GetSysColor
SetRect
MessageBoxW
GetDesktopWindow
SystemParametersInfoW
wsprintfW
IsWindowVisible
SetActiveWindow
SetWindowRgn
OffsetRect
SetTimer
LoadIconW
KillTimer
IsIconic
FindWindowExW
GetShellWindow
RedrawWindow
SetWindowTextA
EnumWindows
GetClassNameW
SetParent
RegisterWindowMessageW
DefWindowProcW
GetKeyState
CreateWindowExW
ScreenToClient
RegisterClassExW
WindowFromPoint
GetCapture
SetFocus
FindWindowW
LoadCursorW
SetCapture
ReleaseCapture
GetDC
GetKeyNameTextW
IsCharLowerW
GetIconInfo
GetDoubleClickTime
WaitMessage
FrameRect
CopyIcon
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
SetClassLongW
IsWindow
ClientToScreen
SetCursor
UpdateLayeredWindow
GetAncestor
ReleaseDC
PostMessageW
SendMessageW
CallNextHookEx
SetWindowsHookExW
GetParent
DestroyWindow
ShowWindow
MoveWindow
GetWindowLongW
GetWindowThreadProcessId
GetWindowRect
SetWindowPos
GetSystemMetrics
AttachThreadInput
GetForegroundWindow
SetWindowLongW
GetClientRect
UpdateWindow
SetForegroundWindow
InvalidateRect
ModifyMenuW
CharUpperBuffW
EmptyClipboard
SetClipboardData
EnableWindow
ExitWindowsEx
UnregisterClassW
GetPropW
CloseClipboard
IsChild

advapi32

RegCreateKeyA
RegisterEventSourceW
DeregisterEventSource
GetTokenInformation
RegQueryValueExW
LookupAccountSidW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegEnumKeyExW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
CryptEnumProvidersW
ReportEventW
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCloseKey
RegQueryValueExA
RegSetValueExA
OpenProcessToken
RegOpenKeyExA
CreateProcessAsUserW

ole32

CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
CreateStreamOnHGlobal
CoTaskMemAlloc
OleDuplicateData
ReleaseStgMedium
CoCreateGuid
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoDisconnectObject
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
DoDragDrop
CoInitializeEx
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop

shell32

SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHGetFolderPathW
ShellExecuteW
ShellExecuteA
Shell_NotifyIconW
SHGetFileInfoW
SHGetDesktopFolder
SHAppBarMessage
SHGetSpecialFolderLocation
DragFinish
SHBrowseForFolderW
DragQueryFileW

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
VariantCopy
VarBstrFromDate
LoadTypeLi
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysAllocString
SysStringLen

shlwapi

PathFindFileNameW
PathRemoveFileSpecW
PathAddBackslashW
PathFindExtensionW
PathCanonicalizeW
PathFileExistsW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW

ws2_32

send
recv
freeaddrinfo
select
getaddrinfo
socket
WSACleanup
bind
closesocket
shutdown
recvfrom
WSASetLastError
WSASocketW
WSAStartup
getpeername
getsockname
getsockopt
ioctlsocket
setsockopt
WSAGetLastError
inet_addr
ntohs
getnameinfo
listen
inet_ntop
accept
connect
inet_pton
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
sendto
__WSAFDIsSet

dbghelp

MiniDumpWriteDump

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

iphlpapi

GetTcpTable
GetAdaptersAddresses

winhttp

WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpReadData

gdi32

SetTextAlign
SetROP2
GetLayout
SetLayout
GetTextFaceW
SetPixelV
GetViewportOrgEx
GetWindowOrgEx
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
SetPaletteEntries
ExtFloodFill
LPtoDP
GetSystemPaletteEntries
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
RoundRect
Rectangle
OffsetRgn
GetRgnBox
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
SetPolyFillMode
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
CreateDIBitmap
CreateRectRgnIndirect
EnumFontFamiliesW
GetTextCharsetInfo
GetTextMetricsW
CombineRgn
PatBlt
SetRectRgn
DPtoLP
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
CreatePolygonRgn
Polygon
Polyline
EnumFontFamiliesExW
RealizePalette
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateDCW
CopyMetaFileW
SetTextColor
SetBkColor
GetStockObject
CreateCompatibleBitmap
CreateSolidBrush
CreateRoundRectRgn
BitBlt
CreateDIBSection
GetObjectW
SelectObject
CreateCompatibleDC
GetDeviceCaps
DeleteDC
DeleteObject
CreateBitmap
SetPixel
SetDIBColorTable
StretchBlt

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

comctl32

ord381

uxtheme

GetThemeSysColor
GetCurrentThemeName
GetThemeColor
GetWindowTheme
IsThemeBackgroundPartiallyTransparent
CloseThemeData
OpenThemeData
DrawThemeText
DrawThemeParentBackground
IsAppThemed
GetThemePartSize
DrawThemeBackground

oledlg

OleUIBusyW

gdiplus

GdipDeleteGraphics
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipAlloc
GdipFree
GdipCreateFromHDC
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdiplusStartup
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipGetImagePalette
GdipCloneImage

crypt32

CertDuplicateCertificateContext
CertFreeCertificateContext
CertOpenSystemStoreW
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CertFindCertificateInStore
CertGetCertificateContextProperty

sensapi

IsNetworkAlive

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

bcrypt

BCryptGenRandom

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 973KB - Virtual size: 973KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 670KB - Virtual size: 670KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c2c391f387e5729dba587e7f49bc9a4

Headers

DLL Characteristics

File Characteristics

Imports

libcef

winmm

kernel32

user32

advapi32

ole32

shell32

oleaut32

shlwapi

ws2_32

dbghelp

version

userenv

iphlpapi

winhttp

gdi32

msimg32

winspool.drv

comctl32

uxtheme

oledlg

gdiplus

crypt32

sensapi

oleacc

imm32

bcrypt

Sections

.text Size: 4.1MB - Virtual size: 4.1MB

.rdata Size: 973KB - Virtual size: 973KB

.data Size: 97KB - Virtual size: 130KB

.rsrc Size: 670KB - Virtual size: 670KB

.reloc Size: 260KB - Virtual size: 260KB

.text
Size: 4.1MB - Virtual size: 4.1MB

.rdata
Size: 973KB - Virtual size: 973KB

.data
Size: 97KB - Virtual size: 130KB

.rsrc
Size: 670KB - Virtual size: 670KB

.reloc
Size: 260KB - Virtual size: 260KB