E:\project\dll-mixed\libcef\Release\libcef.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2ae8ea35115ee7e43206927a968cbca0d06382826aee70c09473dc7fdf3afe09.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ae8ea35115ee7e43206927a968cbca0d06382826aee70c09473dc7fdf3afe09.dll
Resource
win10v2004-20240709-en
General
-
Target
2ae8ea35115ee7e43206927a968cbca0d06382826aee70c09473dc7fdf3afe09.dll
-
Size
163KB
-
MD5
0f9d2f3b2e48ea327b825d1b04d3570b
-
SHA1
cd67373aa471df3e3b10c3d8411811420673ce33
-
SHA256
2ae8ea35115ee7e43206927a968cbca0d06382826aee70c09473dc7fdf3afe09
-
SHA512
98ab9d5b37f68da47241bbb4a024f206af85dea4c5ff0c8959dff3ed9340853b70d7a2131d1788960b23d1e675fcd38a25990f6260b2c4697d583618de7882b4
-
SSDEEP
3072:MDMqVOWLwUTTNUCBK5fqrX8UfpEuBwyl6iyTCb:M5OAVRL4CXvfpEuBwyl6i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ae8ea35115ee7e43206927a968cbca0d06382826aee70c09473dc7fdf3afe09.dll
Files
-
2ae8ea35115ee7e43206927a968cbca0d06382826aee70c09473dc7fdf3afe09.dll.dll windows:5 windows x86 arch:x86
669ead0600e6e943e373b8b47d847f9b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetFileSize
ReadFile
LoadLibraryA
SetEndOfFile
CreateFileW
DeleteFileA
CreateFileA
GetProcAddress
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
RtlUnwind
HeapAlloc
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
IsProcessorFeaturePresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleHandleW
ExitProcess
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
FlushFileBuffers
CloseHandle
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
GetModuleFileNameW
HeapReAlloc
LoadLibraryW
WriteConsoleW
SetStdHandle
GetProcessHeap
user32
MessageBoxA
imm32
ImmEnumInputContext
Exports
Exports
cef_api_hash
cef_browser_host_create_browser_sync
cef_command_line_create
cef_cookie_manager_get_global_manager
cef_currently_on
cef_execute_process
cef_initialize
cef_log
cef_post_task
cef_process_message_create
cef_quit_message_loop
cef_run_message_loop
cef_shutdown
cef_string_ascii_to_utf16
cef_string_list_alloc
cef_string_list_append
cef_string_list_copy
cef_string_list_free
cef_string_list_size
cef_string_list_value
cef_string_map_alloc
cef_string_map_append
cef_string_map_free
cef_string_map_key
cef_string_map_size
cef_string_map_value
cef_string_multimap_alloc
cef_string_multimap_append
cef_string_multimap_free
cef_string_multimap_key
cef_string_multimap_size
cef_string_multimap_value
cef_string_userfree_utf16_free
cef_string_utf16_clear
cef_string_utf16_cmp
cef_string_utf16_set
cef_string_utf16_to_utf8
cef_string_utf8_clear
cef_string_utf8_to_utf16
cef_v8context_get_current_context
cef_v8value_create_function
cef_v8value_create_int
cef_v8value_create_object
cef_v8value_create_string
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ