934d891e468d6a4a793278c61e5a604f19cf44039bbcf8b5610120ccc7b1eae5

Sharing

Copy URL Twitter E-mail

General

Target

934d891e468d6a4a793278c61e5a604f19cf44039bbcf8b5610120ccc7b1eae5
Size

1.3MB
MD5

96dd92099d7fb926df885213c972b560
SHA1

16d994753e57d223c6002cf57bc1159f7fd21701
SHA256

934d891e468d6a4a793278c61e5a604f19cf44039bbcf8b5610120ccc7b1eae5
SHA512

e101f09955a682bcdbe6cbd2e25cab79d6f9814a7d175a45861ba079b1960925cc6af7edd3cc2a21cab916ae90be6be4be29c2904c30630fce23ab49763e3d2d
SSDEEP

24576:zek9x04RqgBZwi58LkaHD+tnm2gS66qFtHZwi8t7qBTPfD2bSJHjJQR:iEvnZ5jtv66qFtHSiVBTPfDRHlQR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
934d891e468d6a4a793278c61e5a604f19cf44039bbcf8b5610120ccc7b1eae5

Files

934d891e468d6a4a793278c61e5a604f19cf44039bbcf8b5610120ccc7b1eae5
.exe windows:6 windows x86 arch:x86

e0c7d80b5d06046824ef6a211ebd6d11

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libcef

cef_quit_message_loop
cef_run_message_loop
cef_shutdown
cef_initialize
cef_execute_process
cef_post_task
cef_string_list_free
cef_string_list_alloc
cef_string_userfree_utf16_free
cef_string_multimap_free
cef_string_multimap_alloc
cef_log
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_v8context_get_current_context
cef_process_message_create
cef_v8value_create_function
cef_v8value_create_object
cef_v8value_create_string
cef_v8value_create_int
cef_v8value_create_bool
cef_v8value_create_null
cef_browser_host_create_browser_sync
cef_command_line_get_global
cef_string_map_free
cef_string_map_alloc
cef_api_hash
cef_string_utf16_to_utf8
cef_string_utf16_cmp
cef_string_utf8_clear
cef_string_utf8_to_utf16
cef_string_utf16_clear
cef_string_utf16_set

setupapi

SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiEnumDeviceInfo

shell32

ShellExecuteExW

crypt32

PFXImportCertStore
CertFreeCertificateChain
CertGetCertificateChain
CryptDecodeObjectEx
CryptStringToBinaryA
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CertCreateCertificateChainEngine
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringA
CryptQueryObject
CertFreeCertificateChainEngine

ws2_32

getaddrinfo
freeaddrinfo
recvfrom
recv
getpeername
ioctlsocket
gethostname
closesocket
listen
htonl
getsockname
connect
bind
accept
select
__WSAFDIsSet
socket
htons
WSAIoctl
setsockopt
WSACleanup
WSAStartup
WSASetLastError
ntohs
WSAGetLastError
WSAWaitForMultipleEvents
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
send
sendto
getsockopt

wldap32

ord143
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord45
ord60
ord211
ord46
ord217

normaliz

IdnToUnicode
IdnToAscii

kernel32

IsValidLocale
GetUserDefaultLCID
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlushFileBuffers
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
CompareStringEx
GetModuleHandleW
EnumSystemLocalesW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetModuleFileNameW
DecodePointer
RaiseException
GetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
WideCharToMultiByte
CreateFileW
ReadFile
WriteFile
CloseHandle
LocalFree
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
QueryPerformanceCounter
GetTickCount
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceFrequency
GetSystemDirectoryA
FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sleep
MultiByteToWideChar
SetLastError
FormatMessageW
MoveFileExA
WaitForSingleObjectEx
GetEnvironmentVariableA
GetStdHandle
GetFileType
PeekNamedPipe
WaitForMultipleObjects
SleepEx
VerSetConditionMask
VerifyVersionInfoW
CreateFileA
GetFileSizeEx
FormatMessageA
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetTimeZoneInformation
SetStdHandle
DeleteFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
WriteConsoleW
LCMapStringEx
EncodePointer
GetLocaleInfoEx
TryEnterCriticalSection
InitializeSRWLock
GetStringTypeW
GetCurrentThreadId
GetFileInformationByHandleEx
AreFileApisANSI
SetFilePointerEx
SetEndOfFile
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindClose
CreateDirectoryW
GetCurrentDirectoryW
GetEnvironmentStringsW

user32

SystemParametersInfoW
GetWindowRect
SetWindowTextW
GetSystemMetrics
SetWindowPos
MoveWindow

advapi32

CryptEncrypt
CryptGetHashParam
CryptAcquireContextA
CryptDestroyHash
CryptDestroyKey
CryptReleaseContext
CryptVerifySignatureW
CryptHashData
CryptCreateHash
CryptImportKey

bcrypt

BCryptGenRandom

Sections

.text
Size: 940KB - Virtual size: 939KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0c7d80b5d06046824ef6a211ebd6d11

Headers

DLL Characteristics

File Characteristics

Imports

libcef

setupapi

shell32

crypt32

ws2_32

wldap32

normaliz

kernel32

user32

advapi32

bcrypt

Sections

.text Size: 940KB - Virtual size: 939KB

.rdata Size: 170KB - Virtual size: 169KB

.data Size: 11KB - Virtual size: 15KB

.rsrc Size: 149KB - Virtual size: 149KB

.reloc Size: 44KB - Virtual size: 44KB

.text
Size: 940KB - Virtual size: 939KB

.rdata
Size: 170KB - Virtual size: 169KB

.data
Size: 11KB - Virtual size: 15KB

.rsrc
Size: 149KB - Virtual size: 149KB

.reloc
Size: 44KB - Virtual size: 44KB