12f59f948d53b6c4b6cd079e4be382e123c8808e90daaed07980c42930f1378b

Sharing

Copy URL

Twitter E-mail

General

Target

12f59f948d53b6c4b6cd079e4be382e123c8808e90daaed07980c42930f1378b
Size

751KB
MD5

1b356648a64766357a0f6428c3200e92
SHA1

20235d35aef43e6911e72e30cc665bf8442955f6
SHA256

12f59f948d53b6c4b6cd079e4be382e123c8808e90daaed07980c42930f1378b
SHA512

475020f214c12bbaa49736d61429e765e4d433714041e8b5f4ed07e40d44dfb5ae3f854e38e4df3087a5a5115a15602847632015f0f078263e2fe0a0faebf549
SSDEEP

12288:eIOWfrViXJkA35z2N9mozRWrHrPThptM59YH78PE/:wW293p2N9zzRWPPThpyfi8P8

Score

1^/10

Malware Config

Signatures

Files

12f59f948d53b6c4b6cd079e4be382e123c8808e90daaed07980c42930f1378b
.dll windows:6 windows x86 arch:x86

0d2d9aea63b610b6301a5eac7cd34816

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:90:b9:34:84:e6:f1:8e:fe:9f:43:68:3a:5f:49:d8
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25/05/2021, 00:00

Not After

21/08/2024, 23:59

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4a:d3:c2:f5:27:d3:e8:e7:1e:9f:7a:a3:7d:2b:37:1a:4d:7f:6a:0d:9f:0e:f1:d9:be:8c:9b:d1:80:dc:e5:6d
Signer

Actual PE Digest

4a:d3:c2:f5:27:d3:e8:e7:1e:9f:7a:a3:7d:2b:37:1a:4d:7f:6a:0d:9f:0e:f1:d9:be:8c:9b:d1:80:dc:e5:6d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\data\landun\workspace\p-3d7f88f5f52b43179dd219a5c6dd1b5c\src\src\cannon\out\release_win32\bin\browser_host.pdb

Imports

libcef

cef_string_multimap_free
cef_string_multimap_alloc
cef_zip_reader_create
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_string_utf16_cmp
cef_write_json
cef_parse_json
cef_get_mime_type
cef_enable_highdpi_support
cef_shutdown
cef_initialize
cef_execute_process
cef_register_extension
cef_post_task
cef_currently_on
cef_stream_reader_create_for_handler
cef_stream_reader_create_for_data
cef_stream_reader_create_for_file
cef_api_hash
cef_command_line_create
cef_string_map_free
cef_string_map_alloc
cef_string_list_free
cef_string_list_alloc
cef_string_userfree_utf16_free
cef_string_utf16_to_utf8
cef_v8value_create_bool
cef_v8value_create_int
cef_v8value_create_string
cef_v8value_create_object
cef_v8value_create_function
cef_process_message_create
cef_v8context_get_current_context
cef_browser_host_create_browser
cef_post_data_create
cef_drag_data_create
cef_post_data_element_create
cef_stream_writer_create_for_handler
cef_log
cef_string_ascii_to_utf16
cef_string_wide_to_utf16
cef_string_utf8_to_wide
cef_string_utf16_set
cef_string_utf16_clear
cef_string_utf8_to_utf16
cef_string_utf8_clear
cef_string_wide_to_utf8
cef_string_wide_set
cef_string_utf8_set
cef_string_wide_clear

kernel32

InitializeCriticalSectionEx
WriteConsoleW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
SetFilePointerEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetModuleFileNameW
ExitProcess
SetStdHandle
GetConsoleOutputCP
FlushFileBuffers
GetFileType
CreateFileW
GetConsoleMode
GetModuleHandleExW
LoadLibraryExW
FreeLibrary
RaiseException
InterlockedFlushSList
RtlUnwind
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStringTypeW
GetProcAddress
GetSystemTimeAsFileTime
GetCPInfo
LCMapStringEx
MultiByteToWideChar
DecodePointer
EncodePointer
WaitForSingleObjectEx
WideCharToMultiByte
QueryPerformanceCounter
TlsFree
TlsGetValue
ResetEvent
TlsAlloc
FindClose
TerminateProcess
WriteFile
GetStdHandle
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetModuleHandleW
CreateEventW
CloseHandle
GetCommandLineW
WaitForSingleObject
SetEvent
GetTickCount64
GetCurrentThreadId
GetCurrentProcessId
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalSize
TlsSetValue

user32

SetCursor
SetRect
SetParent
WindowFromPoint
ScreenToClient
GetKeyState
IsWindow
GetClientRect
GetWindowRect
GetCursorPos
PostMessageW
ClientToScreen
SetWindowLongW
DefWindowProcW
RegisterClipboardFormatW
UpdateLayeredWindowIndirect
ReleaseDC
GetDC
GetPropW
SetCaretPos
GetForegroundWindow
GetFocus
DestroyCaret
CreateCaret
SetWindowPos
UnionRect
CreateWindowExW

imm32

ImmReleaseContext
ImmGetCompositionStringW
ImmGetContext
ImmSetCandidateWindow
ImmAssociateContextEx
ImmNotifyIME

gdi32

SetRectRgn
DeleteObject
GetObjectW
CreateDIBSection
CreateCompatibleDC
DeleteDC
SelectObject
PtInRegion
CreateRectRgn
CombineRgn

shell32

SHGetFolderPathW
DragFinish
DragQueryFileW

ole32

CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium
RevokeDragDrop
DoDragDrop
RegisterDragDrop

Exports

Exports

GetBrowserManagerInstance
GetWebViewInstance
ReleaseGetWebViewInstance

Sections

.text
Size: 553KB - Virtual size: 552KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d2d9aea63b610b6301a5eac7cd34816

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

08:90:b9:34:84:e6:f1:8e:fe:9f:43:68:3a:5f:49:d8Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

4a:d3:c2:f5:27:d3:e8:e7:1e:9f:7a:a3:7d:2b:37:1a:4d:7f:6a:0d:9f:0e:f1:d9:be:8c:9b:d1:80:dc:e5:6dSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libcef

kernel32

user32

imm32

gdi32

shell32

ole32

Exports

Exports

Sections

.text Size: 553KB - Virtual size: 552KB

.rdata Size: 134KB - Virtual size: 133KB

.data Size: 19KB - Virtual size: 88KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 34KB - Virtual size: 33KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

08:90:b9:34:84:e6:f1:8e:fe:9f:43:68:3a:5f:49:d8
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

4a:d3:c2:f5:27:d3:e8:e7:1e:9f:7a:a3:7d:2b:37:1a:4d:7f:6a:0d:9f:0e:f1:d9:be:8c:9b:d1:80:dc:e5:6d
Signer

.text
Size: 553KB - Virtual size: 552KB

.rdata
Size: 134KB - Virtual size: 133KB

.data
Size: 19KB - Virtual size: 88KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 34KB - Virtual size: 33KB