E:\QBlink\minibrowserforwegame\pdb\Release\minibrowser_exe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d0e4011d35bdb199d1d0e4b9a2535617a23b5a0984fbe23c4537b04544d793ed.exe
Resource
win7-20240221-en
General
-
Target
d0e4011d35bdb199d1d0e4b9a2535617a23b5a0984fbe23c4537b04544d793ed
-
Size
520KB
-
MD5
08a9e346ddb6c277111480a83fb3dbb3
-
SHA1
974d16d391b8cb1eaff80bed114b345cd0a36dc0
-
SHA256
d0e4011d35bdb199d1d0e4b9a2535617a23b5a0984fbe23c4537b04544d793ed
-
SHA512
f452d0607b95d8ec0bd6d5a8f2a6677b76b1ad633d82f70bc47fe7379de61754a0daf16ec401214a567db79927110a716d7a46ba3e4b5426922f322bbafc0193
-
SSDEEP
12288:6moY+nk4RI9DsN6X0BXcF3CV1MbjFeO7l7JcaZfPtJAcV:mY+EA2O1tO73caZNJAcV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0e4011d35bdb199d1d0e4b9a2535617a23b5a0984fbe23c4537b04544d793ed
Files
-
d0e4011d35bdb199d1d0e4b9a2535617a23b5a0984fbe23c4537b04544d793ed.exe windows:5 windows x86 arch:x86
1acecb1608860d1a5e20da4db9c96a81
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLastError
DeleteCriticalSection
GetCommandLineW
GetEnvironmentVariableW
RtlCaptureContext
GetProcAddress
GetCurrentProcess
GetCurrentProcessId
SetUnhandledExceptionFilter
GetCurrentThreadId
IsDebuggerPresent
WaitForMultipleObjects
CloseHandle
DuplicateHandle
CreateEventW
GetModuleHandleW
CreateProcessW
SearchPathW
LoadLibraryW
WideCharToMultiByte
ExpandEnvironmentStringsW
FindResourceW
LoadResource
SizeofResource
LocalFree
LockResource
FindResourceExW
FindClose
GetProcessHeap
CreateFileW
WriteFile
FindNextFileW
GetPrivateProfileStringW
FreeLibrary
LocalAlloc
OpenProcess
VirtualProtect
InterlockedCompareExchange
VirtualAlloc
ResumeThread
GetThreadContext
FlushInstructionCache
SetThreadContext
VirtualQuery
SetLastError
HeapSize
HeapFree
HeapReAlloc
GetModuleHandleExA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
HeapAlloc
HeapDestroy
DecodePointer
MultiByteToWideChar
GetFileAttributesW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
RaiseException
InterlockedDecrement
InterlockedIncrement
FindFirstFileExW
GetConsoleMode
SetStdHandle
WriteConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
SetFilePointerEx
GetConsoleCP
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
GetCurrentDirectoryW
GetACP
DeviceIoControl
GetVersionExW
GetSystemDirectoryW
Sleep
GetNativeSystemInfo
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
OutputDebugStringW
RtlUnwind
LoadLibraryExW
GetDriveTypeW
GetFullPathNameA
GetFileType
ExitProcess
GetModuleHandleExW
GetStdHandle
user32
DestroyWindow
GetWindowThreadProcessId
ShowWindow
IsWindow
SetTimer
KillTimer
RegisterClassExW
PostMessageW
CreateWindowExW
GetWindowLongW
SetWindowLongW
DefWindowProcW
IsWindowVisible
SetWindowPos
advapi32
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
shell32
SHGetFolderPathW
SHGetSpecialFolderPathW
CommandLineToArgvW
ShellExecuteW
oleaut32
SysAllocStringLen
SysFreeString
SysAllocString
shlwapi
PathCombineW
PathFileExistsW
StrStrIW
PathAppendW
PathRemoveFileSpecW
netapi32
NetWkstaTransportEnum
NetApiBufferFree
Netbios
Sections
.text Size: 286KB - Virtual size: 285KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE