C:\1\libcef\Debug\libcef.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fa5c1ae296c7d25701a91d8e390b1187481a5143fb10c4c3935a547e6c792d76.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa5c1ae296c7d25701a91d8e390b1187481a5143fb10c4c3935a547e6c792d76.dll
Resource
win10v2004-20240226-en
General
-
Target
fa5c1ae296c7d25701a91d8e390b1187481a5143fb10c4c3935a547e6c792d76
-
Size
706KB
-
MD5
5214c46f57699bdc5a5bfd666d2a0795
-
SHA1
6d6052b758aa23b2e081701e1232ffb8e6a3dcaa
-
SHA256
fa5c1ae296c7d25701a91d8e390b1187481a5143fb10c4c3935a547e6c792d76
-
SHA512
bb7eabef8ea2e0016a49a0a4a24d862917c477a2751333f8ffe2174f00ff98dbea657cc60e1a60ea7d2579cd71fd2d0754c906ed812248b5491a3cf1ff8ae8ab
-
SSDEEP
12288:Vrv7s3aTIAiRuA+++8S/yxjLpkB6Xyu1FfMOMX:V++++ZokB6XnUX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa5c1ae296c7d25701a91d8e390b1187481a5143fb10c4c3935a547e6c792d76
Files
-
fa5c1ae296c7d25701a91d8e390b1187481a5143fb10c4c3935a547e6c792d76.dll windows:6 windows x86 arch:x86
89eeb7c0bacd0d88c4a1e7341a983117
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CloseHandle
CompareStringW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTimeFormatW
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapQueryInformation
HeapReAlloc
HeapSize
HeapValidate
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WideCharToMultiByte
WriteConsoleW
WriteFile
user32
MessageBoxA
MessageBoxW
wsprintfA
Exports
Exports
cef_api_hash
Sections
.text Size: 558KB - Virtual size: 557KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.voltbl Size: 512B - Virtual size: 432B
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ