General

Malware Config

Signatures

Files

• 5c75893ac58009fb5a98931ae1a34de8278841fe5bdcbfc8ba04673fdd208871

  .dll windows:5 windows x86 arch:x86

  9d25354246bd0f2c3cbeb591fd777f1a

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  03:15:43:e7:6c:a9:71:57:5e:ed:f2:2a:a3:71:9d:cc

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  06-06-2023 00:00

  Not After

  07-08-2024 23:59

  Subject

  CN=Brave Software\, Inc.,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:15:43:e7:6c:a9:71:57:5e:ed:f2:2a:a3:71:9d:cc

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  06-06-2023 00:00

  Not After

  07-08-2024 23:59

  Subject

  CN=Brave Software\, Inc.,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  90:95:84:d6:df:65:a5:54:5e:3f:e9:bd:c9:a7:b6:36:92:61:4d:c5:d4:18:69:9d:7e:ac:7c:5b:6f:69:5f:c5

  Signer

  Actual PE Digest

  90:95:84:d6:df:65:a5:54:5e:3f:e9:bd:c9:a7:b6:36:92:61:4d:c5:d4:18:69:9d:7e:ac:7c:5b:6f:69:5f:c5

  Digest Algorithm

  sha256

  PE Digest Matches

  false

  7d:95:9d:45:56:3e:f4:00:21:1c:e1:13:fc:ae:65:07:7e:3e:0f:35

  Signer

  Actual PE Digest

  7d:95:9d:45:56:3e:f4:00:21:1c:e1:13:fc:ae:65:07:7e:3e:0f:35

  Digest Algorithm

  sha1

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  TransactNamedPipe

  SetNamedPipeHandleState

  VirtualQueryEx

  WaitNamedPipeW

  InitOnceComplete

  InitOnceBeginInitialize

  SizeofResource

  SetLastError

  lstrlenW

  WriteFile

  GetPrivateProfileIntW

  OutputDebugStringA

  SetFilePointer

  WaitForSingleObject

  CreateFileW

  GetCurrentThreadId

  ReleaseMutex

  Sleep

  GetFileInformationByHandle

  OutputDebugStringW

  LockResource

  CloseHandle

  FindResourceExW

  LoadResource

  FindResourceW

  GetLocalTime

  GetCurrentProcessId

  lstrcmpiW

  lstrcmpW

  CreateDirectoryW

  FindFirstFileW

  FindNextFileW

  GetCurrentProcess

  RemoveDirectoryW

  WaitForMultipleObjects

  GetEnvironmentVariableW

  FindClose

  GetFileAttributesW

  DuplicateHandle

  FormatMessageW

  GetCurrentThread

  DeleteFileW

  LoadLibraryW

  GetCurrentDirectoryW

  GetProcAddress

  GetModuleHandleW

  FreeLibrary

  GetTempFileNameW

  OpenMutexW

  GetTickCount

  LoadLibraryExW

  GetExitCodeProcess

  ReadFile

  CompareFileTime

  SetEndOfFile

  SetFileAttributesW

  GetFileAttributesExW

  FileTimeToSystemTime

  MoveFileExW

  GetFileSize

  CopyFileW

  GetSystemTimeAsFileTime

  GetFileTime

  FlushFileBuffers

  lstrcpynW

  ExitProcess

  IsDebuggerPresent

  WideCharToMultiByte

  MultiByteToWideChar

  GetTimeZoneInformation

  FileTimeToLocalFileTime

  SystemTimeToFileTime

  SystemTimeToTzSpecificLocalTime

  GetModuleFileNameW

  GetTempPathW

  GetSystemDirectoryW

  VirtualQuery

  TryEnterCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  CreateMutexW

  CreateEventW

  SetEvent

  ResetEvent

  GetLongPathNameW

  TerminateProcess

  WaitForMultipleObjectsEx

  OpenProcess

  CreateToolhelp32Snapshot

  ProcessIdToSessionId

  Process32NextW

  WaitForSingleObjectEx

  Process32FirstW

  ReadProcessMemory

  SetHandleInformation

  CreatePipe

  GetSystemPowerStatus

  GlobalMemoryStatusEx

  CreateProcessW

  SetProcessWorkingSetSize

  GetVersionExW

  VerSetConditionMask

  VerifyVersionInfoW

  LocalAlloc

  HeapSetInformation

  GlobalAlloc

  GlobalFree

  GlobalLock

  GlobalUnlock

  GetStdHandle

  QueryDosDeviceW

  GetLogicalDriveStringsW

  OpenEventW

  CreateThread

  SetCurrentDirectoryW

  OpenThread

  QueryPerformanceCounter

  GetCommandLineW

  GetStringTypeExW

  GetThreadLocale

  lstrcmpA

  GetStringTypeExA

  SetFilePointerEx

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsProcessorFeaturePresent

  GetStartupInfoW

  InitializeSListHead

  GetStringTypeW

  CompareStringEx

  InitializeCriticalSectionEx

  EncodePointer

  LCMapStringEx

  GetCPInfo

  RtlUnwind

  InterlockedPushEntrySList

  InterlockedFlushSList

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetSystemInfo

  VirtualAlloc

  VirtualProtect

  GetModuleHandleExW

  GetFileType

  GetDateFormatW

  GetTimeFormatW

  CompareStringW

  LCMapStringW

  GetLocaleInfoW

  IsValidLocale

  GetUserDefaultLCID

  EnumSystemLocalesW

  FindFirstFileExW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCommandLineA

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetEnvironmentVariableW

  GetFileSizeEx

  SetStdHandle

  GetConsoleOutputCP

  GetConsoleMode

  ReadConsoleW

  WriteConsoleW

  GetProcessId

  ReleaseSemaphore

  RtlCaptureContext

  DeleteTimerQueueTimer

  CreateTimerQueueTimer

  LoadLibraryExA

  VirtualFree

  FlushInstructionCache

  InterlockedPopEntrySList

  MulDiv

  GlobalHandle

  CreateTimerQueue

  DeleteTimerQueueEx

  GetSystemDefaultLangID

  GetUserDefaultLangID

  GetComputerNameExW

  GetPrivateProfileStringW

  DeviceIoControl

  GetSystemTime

  GetProcessHeap

  DeleteCriticalSection

  HeapDestroy

  DecodePointer

  HeapAlloc

  RaiseException

  HeapReAlloc

  GetLastError

  HeapSize

  InitializeCriticalSectionAndSpinCount

  QueryPerformanceFrequency

  UnregisterWaitEx

  RegisterWaitForSingleObject

  QueueUserWorkItem

  Thread32First

  Thread32Next

  SetProcessShutdownParameters

  GetProcessShutdownParameters

  CreateSemaphoreW

  SetPriorityClass

  LocalFree

  HeapFree

  oleaut32

  SafeArrayCopy

  SafeArrayGetVartype

  SafeArrayLock

  SafeArrayCreate

  VariantClear

  SafeArrayUnlock

  SysAllocStringLen

  SysStringLen

  VarUI4FromStr

  VariantTimeToSystemTime

  SafeArrayGetLBound

  SafeArrayGetUBound

  SafeArrayDestroy

  SafeArrayRedim

  SysFreeString

  VarBstrCmp

  VariantInit

  LoadTypeLi

  LoadRegTypeLi

  SystemTimeToVariantTime

  SysAllocString

  SysReAllocStringLen

  VariantChangeType

  SysAllocStringByteLen

  SysStringByteLen

  OleCreateFontIndirect

  user32

  MessageBoxW

  CharLowerBuffW

  CharLowerW

  UnregisterClassW

  CharUpperW

  FlashWindow

  wsprintfW

  GetWindowLongW

  GetMessageW

  AllowSetForegroundWindow

  GetWindow

  GetWindowRect

  SetClipboardData

  GetMenuState

  InflateRect

  SetActiveWindow

  EmptyClipboard

  IsMenu

  CopyRect

  FrameRect

  IsRectEmpty

  GetSysColorBrush

  SystemParametersInfoW

  UpdateWindow

  GetCursorPos

  EnumChildWindows

  EnableMenuItem

  EnableWindow

  IsDialogMessageW

  SendDlgItemMessageW

  GetWindowTextLengthW

  GetSystemMenu

  GetFocus

  GetDC

  FillRect

  ScreenToClient

  EndDialog

  SetWindowTextW

  ShowWindow

  InvalidateRgn

  RedrawWindow

  DestroyIcon

  ClientToScreen

  DestroyAcceleratorTable

  IsChild

  GetTopWindow

  GetSysColor

  MoveWindow

  CreateAcceleratorTableW

  SetLayeredWindowAttributes

  GetParent

  SetFocus

  wvsprintfW

  CloseClipboard

  OpenClipboard

  LoadImageW

  EnumWindows

  GetSystemMetrics

  SendMessageW

  IsWindowVisible

  GetWindowThreadProcessId

  PostThreadMessageW

  SetForegroundWindow

  CharNextA

  CharLowerBuffA

  IsWindow

  LoadStringW

  OffsetRect

  SetWindowContextHelpId

  GetClassNameW

  SetCapture

  MapDialogRect

  RemoveMenu

  GetDlgItem

  GetDesktopWindow

  CreateDialogIndirectParamW

  DestroyWindow

  SetWindowPos

  MonitorFromWindow

  CreateWindowExW

  DispatchMessageW

  GetMonitorInfoW

  PeekMessageW

  MapWindowPoints

  TranslateMessage

  GetClientRect

  PostQuitMessage

  CharNextW

  PostMessageW

  WaitForInputIdle

  GetClassInfoExW

  KillTimer

  SetWindowLongW

  LoadCursorW

  SetTimer

  RegisterClassExW

  CallWindowProcW

  DefWindowProcW

  CharUpperBuffW

  GetWindowTextW

  EndPaint

  BeginPaint

  ReleaseDC

  InvalidateRect

  ReleaseCapture

  RegisterWindowMessageW

  iphlpapi

  GetIfTable

  netapi32

  NetGetJoinInformation

  NetApiBufferFree

  NetWkstaUserGetInfo

  NetWkstaGetInfo

  psapi

  EnumProcessModules

  GetModuleFileNameExW

  EnumProcesses

  shlwapi

  PathFindFileNameW

  SHQueryValueExW

  PathFileExistsW

  PathStripPathW

  PathCommonPrefixW

  PathFindExtensionW

  UrlIsW

  UrlEscapeW

  PathAppendA

  PathIsDirectoryW

  PathCreateFromUrlW

  PathRemoveExtensionW

  PathCanonicalizeW

  PathAppendW

  UrlCombineW

  PathRemoveFileSpecW

  PathAddBackslashW

  UrlUnescapeA

  PathAddExtensionW

  version

  VerQueryValueW

  GetFileVersionInfoW

  GetFileVersionInfoSizeW

  userenv

  UnloadUserProfile

  ExpandEnvironmentStringsForUserW

  EnterCriticalPolicySection

  LeaveCriticalPolicySection

  CreateEnvironmentBlock

  GetProfileType

  DestroyEnvironmentBlock

  wtsapi32

  WTSFreeMemory

  WTSEnumerateSessionsW

  WTSQuerySessionInformationW

  advapi32

  RegEnumKeyExW

  ControlService

  QueryServiceStatus

  SystemFunction036

  DuplicateToken

  RegOverridePredefKey

  GetUserNameW

  SetSecurityDescriptorOwner

  GetAce

  RegOpenCurrentUser

  IsTextUnicode

  DeregisterEventSource

  CreateServiceW

  SetServiceStatus

  ChangeServiceConfig2W

  DeleteService

  RegisterServiceCtrlHandlerW

  StartServiceCtrlDispatcherW

  QueryServiceConfigW

  ChangeServiceConfigW

  QueryServiceConfig2W

  RegisterEventSourceW

  ReportEventW

  TraceEvent

  GetSecurityInfo

  CryptAcquireContextW

  CryptGenRandom

  CryptReleaseContext

  GetTraceLoggerHandle

  GetTraceEnableFlags

  GetTraceEnableLevel

  RegisterTraceGuidsW

  UnregisterTraceGuids

  GetSidSubAuthorityCount

  GetSidIdentifierAuthority

  AllocateAndInitializeSid

  ImpersonateSelf

  FreeSid

  CheckTokenMembership

  RegNotifyChangeKeyValue

  RegQueryInfoKeyW

  RegDeleteKeyW

  RegCreateKeyExW

  GetAclInformation

  RegSetValueExW

  RegDeleteValueW

  RegEnumValueW

  LookupPrivilegeValueW

  AdjustTokenPrivileges

  CreateProcessAsUserW

  ConvertSidToStringSidW

  DuplicateTokenEx

  SetSecurityDescriptorDacl

  RevertToSelf

  MakeSelfRelativeSD

  RegQueryValueExW

  GetSecurityDescriptorLength

  GetLengthSid

  RegOpenKeyExW

  InitializeAcl

  AddAce

  IsValidSid

  GetSecurityDescriptorOwner

  InitializeSid

  CopySid

  GetSecurityDescriptorControl

  SetNamedSecurityInfoW

  GetSidLengthRequired

  GetSidSubAuthority

  GetSecurityDescriptorGroup

  RegCloseKey

  GetSecurityDescriptorDacl

  GetSecurityDescriptorSacl

  GetTokenInformation

  SetSecurityDescriptorGroup

  MakeAbsoluteSD

  OpenThreadToken

  OpenServiceW

  InitializeSecurityDescriptor

  StartServiceW

  OpenProcessToken

  ImpersonateLoggedOnUser

  ConvertStringSidToSidW

  GetNamedSecurityInfoW

  OpenSCManagerW

  CloseServiceHandle

  EqualSid

  ole32

  CoReleaseServerProcess

  CoTaskMemAlloc

  CoUninitialize

  CoRegisterClassObject

  CoInitializeSecurity

  CoSuspendClassObjects

  CoTaskMemRealloc

  CoInitializeEx

  CoSetProxyBlanket

  CoRegisterPSClsid

  OleSaveToStream

  ReadClassStm

  WriteClassStm

  OleUninitialize

  CoTaskMemFree

  CoRevertToSelf

  CoGetCallContext

  CoCreateInstance

  StringFromGUID2

  CoCreateGuid

  CoGetClassObject

  CoImpersonateClient

  CoGetObject

  CoRevokeClassObject

  IIDFromString

  CreateStreamOnHGlobal

  CoResumeClassObjects

  CLSIDFromProgID

  OleInitialize

  CLSIDFromString

  CoAddRefServerProcess

  OleLockRunning

  shell32

  ShellExecuteExW

  CommandLineToArgvW

  SHGetFolderPathW

  ord680

  comctl32

  InitCommonControlsEx

  _TrackMouseEvent

  crypt32

  CryptUnprotectData

  CryptProtectData

  CertFreeCertificateContext

  CryptQueryObject

  CertDuplicateCertificateContext

  CertCloseStore

  CertFindCertificateInStore

  CertGetNameStringW

  CryptHashCertificate

  msimg32

  GradientFill

  uxtheme

  SetWindowTheme

  wininet

  InternetQueryDataAvailable

  InternetOpenW

  HttpQueryInfoW

  InternetCrackUrlW

  HttpSendRequestW

  InternetCloseHandle

  InternetConnectW

  InternetReadFile

  HttpAddRequestHeadersW

  HttpOpenRequestW

  wintrust

  WinVerifyTrust

  gdi32

  DPtoLP

  CreateFontIndirectW

  CreateSolidBrush

  DeleteObject

  GetObjectW

  DeleteDC

  GetDeviceCaps

  GetStockObject

  CreateCompatibleDC

  SelectObject

  CreateCompatibleBitmap

  BitBlt

  ExtTextOutW

  FillRgn

  CombineRgn

  SetBkColor

  SetViewportOrgEx

  GetRegionData

  SetTextColor

  CreateRectRgn

  OffsetRgn

  GetTextMetricsW

  CreateRectRgnIndirect

  Exports

  Exports

  DllEntry

  Sections

  .text

  Size: 788KB - Virtual size: 788KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 180KB - Virtual size: 180KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 13KB - Virtual size: 22KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 36KB - Virtual size: 36KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ