C:\mtasa-blue-master-province\Bin\mta\cef\CEFLauncher_DLL.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7275fd2565e47122c66f0a5aca119921c411ff614185b9160632eaea33b665d4.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7275fd2565e47122c66f0a5aca119921c411ff614185b9160632eaea33b665d4.dll
Resource
win10v2004-20240508-en
General
-
Target
7275fd2565e47122c66f0a5aca119921c411ff614185b9160632eaea33b665d4
-
Size
748KB
-
MD5
5cc4036bca8d026c6640c5666e8ba4d4
-
SHA1
18358b25f756c90ddb56189032b4b885357af93a
-
SHA256
7275fd2565e47122c66f0a5aca119921c411ff614185b9160632eaea33b665d4
-
SHA512
66b099a76ebc570f4f63fe1c7bfb244d4e21ddde12cc7ed55d9a9e6e3dc305b3a1327da59e8866f7d296eb5a897851167cad46514b522a70212446413986ea7f
-
SSDEEP
6144:Grimv1BaVoD5QbEBmtj7JN/bhfCU9xa+al9ze7mpFr9v30AOXBhuSpOvsKn:G95vBobzhqU9OFrB09LHEEKn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7275fd2565e47122c66f0a5aca119921c411ff614185b9160632eaea33b665d4
Files
-
7275fd2565e47122c66f0a5aca119921c411ff614185b9160632eaea33b665d4.dll windows:6 windows x86 arch:x86
248d8add818c9001bea0da3a02ab8bdf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
libcef
cef_string_list_append
cef_string_map_size
cef_string_map_key
cef_string_map_value
cef_string_map_append
cef_string_multimap_size
cef_string_multimap_key
cef_string_multimap_value
cef_string_multimap_append
cef_string_map_alloc
cef_string_map_free
cef_string_list_size
cef_string_multimap_free
cef_string_utf16_cmp
cef_api_hash
cef_execute_process
cef_v8value_create_function
cef_v8value_create_object
cef_string_list_free
cef_string_list_alloc
cef_process_message_create
cef_string_userfree_utf16_free
cef_string_utf16_set
cef_log
cef_string_list_value
cef_string_utf16_to_utf8
cef_string_utf8_to_utf16
cef_string_utf16_clear
cef_string_multimap_alloc
cef_string_utf8_clear
kernel32
WriteConsoleW
CloseHandle
CreateFileW
GetModuleFileNameW
GetModuleHandleW
SetDllDirectoryW
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
HeapSize
SetStdHandle
SetFilePointerEx
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetFileType
GetStdHandle
HeapFree
HeapAlloc
GetModuleHandleExW
ExitProcess
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
RtlUnwind
RaiseException
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
GetStringTypeW
LCMapStringEx
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
DecodePointer
EncodePointer
WideCharToMultiByte
SetLastError
GetLastError
Exports
Exports
?InitCEF@@YAHXZ
Sections
.text Size: 549KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ