General

Malware Config

Signatures

Files

• c2934ba1e242c89a8528dcb5bf81e6a2e8b64f017f371143eb83ede9f0033290

  .zip

  Password: infected

• 3927c345d61acfb52e6ddf5015033023b58df5b5c638cd6e7897a1b8e5bf98e7.exe

  .dll windows:6 windows x64 arch:x64

  68dd6e8a0fd18b5e7523447cb9049ee7

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\admin\source\repos\3_1\libcef\x64\Release\libcef.pdb

  Imports

  kernel32

  GetCommandLineW

  GetCommandLineA

  GetModuleHandleA

  K32GetModuleInformation

  CreateFileA

  CreateFileMappingW

  MapViewOfFile

  VirtualProtect

  UnmapViewOfFile

  CloseHandle

  LoadLibraryA

  GetProcAddress

  FreeLibrary

  Sleep

  CreateThread

  WriteFile

  CreateProcessA

  WaitForSingleObject

  WriteConsoleW

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  IsProcessorFeaturePresent

  QueryPerformanceCounter

  GetCurrentProcessId

  GetCurrentThreadId

  GetSystemTimeAsFileTime

  InitializeSListHead

  IsDebuggerPresent

  GetStartupInfoW

  GetModuleHandleW

  RtlUnwindEx

  RtlPcToFileHeader

  RaiseException

  InterlockedFlushSList

  GetLastError

  SetLastError

  EncodePointer

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  InitializeCriticalSectionAndSpinCount

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  LoadLibraryExW

  ExitProcess

  GetModuleHandleExW

  GetModuleFileNameW

  HeapAlloc

  HeapFree

  FindClose

  FindFirstFileExW

  FindNextFileW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCPInfo

  MultiByteToWideChar

  WideCharToMultiByte

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  FlsAlloc

  FlsGetValue

  FlsSetValue

  FlsFree

  LCMapStringW

  GetProcessHeap

  GetStdHandle

  GetFileType

  GetStringTypeW

  HeapSize

  HeapReAlloc

  SetStdHandle

  FlushFileBuffers

  GetConsoleOutputCP

  GetConsoleMode

  SetFilePointerEx

  CreateFileW

  Exports

  Exports

  cef_api_hash

  cef_execute_process

  cef_get_path

  cef_log

  cef_post_task

  cef_process_message_create

  cef_string_list_alloc

  cef_string_list_append

  cef_string_list_free

  cef_string_list_size

  cef_string_list_value

  cef_string_map_alloc

  cef_string_map_append

  cef_string_map_free

  cef_string_map_key

  cef_string_map_size

  cef_string_map_value

  cef_string_multimap_alloc

  cef_string_multimap_append

  cef_string_multimap_free

  cef_string_multimap_key

  cef_string_multimap_size

  cef_string_multimap_value

  cef_string_userfree_utf16_free

  cef_string_utf16_clear

  cef_string_utf16_cmp

  cef_string_utf16_set

  cef_string_utf16_to_utf8

  cef_string_utf8_clear

  cef_string_utf8_to_utf16

  cef_v8context_get_current_context

  cef_v8value_create_bool

  cef_v8value_create_function

  cef_v8value_create_int

  cef_v8value_create_string

  Sections

  .text

  Size: 68KB - Virtual size: 68KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 42KB - Virtual size: 41KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 257KB - Virtual size: 261KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  _RDATA

  Size: 512B - Virtual size: 348B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 512B - Virtual size: 248B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ