Brave[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

Brave.exe
Size

14.1MB
MD5

646ecd2ccaa5a763825f152ebca9902e
SHA1

e0a36bafd7c96f9cd7d4fcd746e0b85b2de1bcb0
SHA256

261c333e77b9aac096fec3484f3d30be8e79fb38a3c697dd1f49d2ce348092cb
SHA512

f522c46b096d02fa967474b012f0b58a02b56d760b440239dec06cb88cd36a65c36d9d396a20c913469e6ddc7ee5fe88a5e21780806532e7dea9c5548a7540dc
SSDEEP

393216:Kxyhac21dJ3fIY5uk6U1TjBIT2+V0TZZR:d21dJ3mk6U1TjaT2+GTvR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Brave.exe

Files

Brave.exe
.exe windows:6 windows x64 arch:x64

f07ea9809aa246897f95f538d0cc54ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

d3d11

D3D11CreateDeviceAndSwapChain

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

d3dcompiler_43

D3DCompile

dwmapi

DwmEnableBlurBehindWindow

api-ms-win-core-string-l1-1-0

WideCharToMultiByte

api-ms-win-core-heap-l2-1-0

GlobalFree

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA

api-ms-win-core-localization-l1-2-0

FormatMessageA

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryA

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask

api-ms-win-core-memory-l1-1-0

ReadProcessMemory

api-ms-win-core-processthreads-l1-1-0

OpenProcessToken

api-ms-win-core-synch-l1-1-0

WaitForSingleObjectEx

api-ms-win-core-processthreads-l1-1-1

GetThreadContext

api-ms-win-core-toolhelp-l1-1-0

Process32NextW

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW

api-ms-win-core-errorhandling-l1-1-0

SetLastError

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryA

api-ms-win-core-util-l1-1-0

Beep

api-ms-win-ntuser-sysparams-l1-1-0

GetSystemMetrics

api-ms-win-security-base-l1-1-0

AdjustTokenPrivileges

api-ms-win-security-lsalookup-l2-1-0

LookupPrivilegeValueW

user32

MessageBoxW

safeguard-lib

??0SDK@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

imm32

ImmSetCompositionWindow

msvcp140

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

normaliz

IdnToAscii

wldap32

ord41

crypt32

CertFindExtension

ws2_32

closesocket

rpcrt4

UuidCreate

psapi

GetModuleInformation

userenv

UnloadUserProfile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception

api-ms-win-crt-stdio-l1-1-0

_wfopen

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-heap-l1-1-0

_set_new_mode

api-ms-win-crt-convert-l1-1-0

strtoll

api-ms-win-crt-runtime-l1-1-0

_c_exit

api-ms-win-crt-time-l1-1-0

strftime

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-math-l1-1-0

sinf

api-ms-win-crt-filesystem-l1-1-0

_fstat64

api-ms-win-core-heap-l1-1-0

HeapAlloc

api-ms-win-security-sddl-ansi-l1-1-0

ConvertSidToStringSidA

api-ms-win-core-kernel32-legacy-l1-1-2

VerifyVersionInfoA

api-ms-win-core-kernel32-legacy-l1-1-0

MoveFileExA

api-ms-win-security-cryptoapi-l1-1-0

CryptReleaseContext

api-ms-win-core-processenvironment-l1-1-0

GetStdHandle

api-ms-win-core-file-l1-1-0

GetFileSizeEx

api-ms-win-core-namedpipe-l1-1-0

PeekNamedPipe

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

kernel32

GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

Exports

Exports

?timeToReadableString@SDK@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z

Sections

kl!akhPB
Size: - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

?J%fUPx%
Size: - Virtual size: 534KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PSdU>W.@
Size: - Virtual size: 7.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xW):_,[k
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

'8L9V%V%
Size: - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

>NX_g>>T
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

<cw#4+[/
Size: 14.1MB - Virtual size: 14.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

1,lih+gz
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

w$0E!-n)
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f07ea9809aa246897f95f538d0cc54ad

Headers

DLL Characteristics

File Characteristics

Imports

d3d11

d3dx11_43

d3dcompiler_43

dwmapi

api-ms-win-core-string-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-heap-obsolete-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-memory-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-toolhelp-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-ntuser-sysparams-l1-1-0

api-ms-win-security-base-l1-1-0

api-ms-win-security-lsalookup-l2-1-0

user32

safeguard-lib

imm32

msvcp140

normaliz

wldap32

crypt32

ws2_32

rpcrt4

psapi

userenv

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-security-sddl-ansi-l1-1-0

api-ms-win-core-kernel32-legacy-l1-1-2

api-ms-win-core-kernel32-legacy-l1-1-0

api-ms-win-security-cryptoapi-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-namedpipe-l1-1-0

api-ms-win-core-synch-l1-2-1

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-interlocked-l1-1-0

kernel32

Exports

Exports

Sections

kl!akhPB Size: - Virtual size: 675KB

?J%fUPx% Size: - Virtual size: 534KB

PSdU>W.@ Size: - Virtual size: 7.6MB

xW):_,[k Size: - Virtual size: 27KB

'8L9V%V% Size: - Virtual size: 5.4MB

>NX_g>>T Size: 5KB - Virtual size: 5KB

kl!akhPB
Size: - Virtual size: 675KB

?J%fUPx%
Size: - Virtual size: 534KB

PSdU>W.@
Size: - Virtual size: 7.6MB

xW):_,[k
Size: - Virtual size: 27KB

'8L9V%V%
Size: - Virtual size: 5.4MB

>NX_g>>T
Size: 5KB - Virtual size: 5KB

<cw#4+[/
Size: 14.1MB - Virtual size: 14.1MB

1,lih+gz
Size: 512B - Virtual size: 176B

w$0E!-n)
Size: 512B - Virtual size: 469B