822c7ceba91741c1e899433fe05121e6c8096be2df21acc6dac76b587dba9e06

Sharing

Copy URL Twitter E-mail

General

Target

822c7ceba91741c1e899433fe05121e6c8096be2df21acc6dac76b587dba9e06
Size

1.2MB
MD5

d1d9f2574147e36b5af7ab019c2fea21
SHA1

13661585fc01545ba8ac912ffaba6c1897b9c420
SHA256

822c7ceba91741c1e899433fe05121e6c8096be2df21acc6dac76b587dba9e06
SHA512

a9e3c23d9c360f73367f54e6647351fde81097df18a9f812c9369b3c4b6bf1b8642d4c550194553e893a51c8417dc77a1153f972fb0711344b25b536b08a2ce5
SSDEEP

24576:iITFI6+A070gNt4RsdEYLkg6/zalAS2jYDriMzmnQ7YIv+sr0Yu01Uu:FFV8t4RnduAeTEIBEu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
822c7ceba91741c1e899433fe05121e6c8096be2df21acc6dac76b587dba9e06

Files

822c7ceba91741c1e899433fe05121e6c8096be2df21acc6dac76b587dba9e06
.dll windows:6 windows x86 arch:x86

834b76073ea7e739ded8f6831676b5b4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateThread
CreateEventA
OpenEventA
CreateNamedPipeA
GetLastError
ConnectNamedPipe
SetEvent
WaitForSingleObject
ResetEvent
WaitNamedPipeA
CreateFileA
ReadFile
WriteFile
ReleaseMutex
DisconnectNamedPipe
Sleep
GetModuleHandleA
K32GetModuleInformation
GetCurrentProcess
GetCurrentThread
WideCharToMultiByte
VirtualProtectEx
WriteProcessMemory
GetCurrentProcessId
SuspendThread
ResumeThread
WriteConsoleW
HeapSize
CreateFileW
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
SetLastError
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExW
GetCurrentThreadId
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualFree
VirtualQueryEx
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetSystemTimeAsFileTime
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW

libcef

cef_string_utf16_clear
cef_string_utf16_to_utf8
cef_string_utf8_clear
cef_log
cef_string_utf16_set
cef_string_userfree_utf16_free
cef_string_multimap_alloc
cef_string_multimap_free
cef_string_list_alloc
cef_string_list_free
cef_string_utf16_cmp
cef_string_list_size
cef_string_list_value
cef_string_list_append
cef_string_map_size
cef_string_map_key
cef_string_map_value
cef_string_map_append
cef_string_multimap_size
cef_string_multimap_key
cef_string_multimap_value
cef_string_multimap_append
cef_string_map_alloc
cef_string_map_free

Sections

.text
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detourc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 863KB - Virtual size: 863KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 233B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

834b76073ea7e739ded8f6831676b5b4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

libcef

Sections

.text Size: 246KB - Virtual size: 245KB

.rdata Size: 86KB - Virtual size: 86KB

.data Size: 5KB - Virtual size: 8KB

.detourc Size: 4KB - Virtual size: 4KB

.detourd Size: 512B - Virtual size: 12B

.vmp0 Size: 863KB - Virtual size: 863KB

.reloc Size: 18KB - Virtual size: 17KB

.rsrc Size: 512B - Virtual size: 233B

.text
Size: 246KB - Virtual size: 245KB

.rdata
Size: 86KB - Virtual size: 86KB

.data
Size: 5KB - Virtual size: 8KB

.detourc
Size: 4KB - Virtual size: 4KB

.detourd
Size: 512B - Virtual size: 12B

.vmp0
Size: 863KB - Virtual size: 863KB

.reloc
Size: 18KB - Virtual size: 17KB

.rsrc
Size: 512B - Virtual size: 233B