520c48057697f947e091a78d3b2aaea4e4ffc298443b4d9bd2b001e6c04e5a79

Sharing

Copy URL Twitter E-mail

General

Target

520c48057697f947e091a78d3b2aaea4e4ffc298443b4d9bd2b001e6c04e5a79
Size

754KB
MD5

728bf41759f9b56681e89655eedd3d44
SHA1

d13c55c456292b9ac6fb8b03bbf5f9aac6ce4ce3
SHA256

520c48057697f947e091a78d3b2aaea4e4ffc298443b4d9bd2b001e6c04e5a79
SHA512

c1ab44c89e824ceda7bb660b03c0c4b3f02366905af6b87d0396f8d29183b2dd42b0ea26e2469d36591c0281935575489ed5ace5219140121ee0d7410cbf8ac5
SSDEEP

12288:uKdiyIjOIsRApgIwbqaEeeY6QUlkyIe7DeRtJEilUQh7Xdm3u8FXZayaQPuDgrlS:NrIpJwbceeY6QUiVEiDlXdme8eyaQzrr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
520c48057697f947e091a78d3b2aaea4e4ffc298443b4d9bd2b001e6c04e5a79

Files

520c48057697f947e091a78d3b2aaea4e4ffc298443b4d9bd2b001e6c04e5a79
.dll windows:6 windows x86 arch:x86

f5520101c704e40ec35cb77b5ad15544

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libcef

cef_log
cef_string_wide_to_utf8
cef_string_utf8_clear
cef_string_utf8_to_utf16
cef_string_utf16_set
cef_string_utf16_to_utf8
cef_string_utf16_clear

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenW

kernel32

InterlockedPushEntrySList
SetEndOfFile
OutputDebugStringW
HeapSize
FlushFileBuffers
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCurrentProcessId
CreateFileMappingA
MapViewOfFile
CreateFileMappingW
GetLastError
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
VirtualFree
GetVolumeInformationW
CreatePipe
GetStartupInfoW
CreateProcessW
WaitForSingleObject
ReadFile
CloseHandle
GetModuleFileNameA
OpenFileMappingA
DeleteFileA
UnmapViewOfFile
SetLastError
FormatMessageA
GetStringTypeW
EncodePointer
DecodePointer
LocalFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
LCMapStringEx
GetLocaleInfoEx
CompareStringEx
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetModuleHandleW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetOEMCP
GetACP
IsValidCodePage
RtlUnwind
RaiseException
WriteConsoleW
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleFileNameW
GetCurrentThread
HeapFree
HeapAlloc
GetStdHandle
GetTimeZoneInformation
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleOutputCP
GetFileSizeEx
SetFilePointerEx
HeapReAlloc
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
FindNextFileW

Exports

Exports

ClearFingerPrintFromID
FBroBrowserHost_ExecuteDevToolsMethod
FBroBrowserHost_SendDevToolsMessage
FBroBrowser_EnableWebsocketClientHook
FBroBrowser_GetExpirationTime
FBroBrowser_GetFunctionStr
FBroBrowser_GetRegistrationTime
FBroBrowser_IsLicenceKey
FBroBrowser_SetAudioFingerPrint_constant
FBroBrowser_SetAudioFingerPrint_random
FBroBrowser_SetCanvasFingerPrint_constant
FBroBrowser_SetCanvasFingerPrint_random
FBroBrowser_SetLicenceKey
FBroBrowser_SetPlugins
FBroBrowser_SetTouchEventEmulationEnabled
FBroBrowser_SetVirAcceptlanguages
FBroBrowser_SetVirAppCodeName
FBroBrowser_SetVirAppName
FBroBrowser_SetVirAppVersion
FBroBrowser_SetVirBatteryManagerCharging
FBroBrowser_SetVirBatteryManagerChargingTime
FBroBrowser_SetVirBatteryManagerDischargingTime
FBroBrowser_SetVirBatteryManagerLevel
FBroBrowser_SetVirCSSFontFingerprint
FBroBrowser_SetVirCanvas2DFontFingerprint
FBroBrowser_SetVirCookieEnabled
FBroBrowser_SetVirDeviceMemory
FBroBrowser_SetVirDevicePixelRatio
FBroBrowser_SetVirHardwareConcurrency
FBroBrowser_SetVirJavaEnabled
FBroBrowser_SetVirLanguages
FBroBrowser_SetVirLongitudeAndLatitude
FBroBrowser_SetVirMaxTouchPoints
FBroBrowser_SetVirOnLine
FBroBrowser_SetVirPlatform
FBroBrowser_SetVirProduct
FBroBrowser_SetVirProductSub
FBroBrowser_SetVirRectFingerprint
FBroBrowser_SetVirScreenHeightAndWidth
FBroBrowser_SetVirScreenXAndY
FBroBrowser_SetVirScreenavailHeightAndWidth
FBroBrowser_SetVirScreencolorDepth
FBroBrowser_SetVirScreenpixelDepth
FBroBrowser_SetVirUserAgent
FBroBrowser_SetVirVendor
FBroBrowser_SetVirVendorSub
FBroBrowser_SetVirWebdriver
FBroBrowser_SetVirWebglrenderer
FBroBrowser_SetVirWebglvendor
FBroBrowser_SetVirWebrtcIP
FBroBrowser_SetWebGLFingerPrint_constant
FBroBrowser_SetWebGLFingerPrint_random
FBroBrowser_setVirTimeZone
FBroFrame_SetEmitTouchEventsForMouse
FBroWebSocketClint_GetAddress
FBroWebSocketClint_GetBinaryType
FBroWebSocketClint_GetExtensions
FBroWebSocketClint_GetProtocol
FBroWebSocketClint_SendData
FBroWebSocketClint_SendText

Sections

.text
Size: 620KB - Virtual size: 619KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5520101c704e40ec35cb77b5ad15544

Headers

DLL Characteristics

File Characteristics

Imports

libcef

wininet

kernel32

Exports

Exports

Sections

.text Size: 620KB - Virtual size: 619KB

.rdata Size: 101KB - Virtual size: 101KB

.data Size: 7KB - Virtual size: 12KB

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 23KB - Virtual size: 23KB

.text
Size: 620KB - Virtual size: 619KB

.rdata
Size: 101KB - Virtual size: 101KB

.data
Size: 7KB - Virtual size: 12KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 23KB - Virtual size: 23KB