38626bbfb9c9b4732044591dbda0978e5fc3210beb98f1be93509289206e9980N

Sharing

Copy URL

Twitter E-mail

General

Target

38626bbfb9c9b4732044591dbda0978e5fc3210beb98f1be93509289206e9980N
Size

612KB
MD5

a2e1c79e70ddad8b64b9730e568759d0
SHA1

14482829d4bbd90b3d0d02ff13b4b0e15d771698
SHA256

38626bbfb9c9b4732044591dbda0978e5fc3210beb98f1be93509289206e9980
SHA512

839e944e950d9d36a0a1dd017d252f78f9765e80dc278633e8f78f77146788ad62498b16395f1f84b5ce3fe2315847afcf540943860118e76fbdaed91775878c
SSDEEP

12288:hYnx/eAufOcV3WBIirjIdbu0eK1evjx9eK5J9Dy5JewUFefSl0M9W:qjcVmIKMu0Bgx9eEFC4WSS0W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38626bbfb9c9b4732044591dbda0978e5fc3210beb98f1be93509289206e9980N

Files

38626bbfb9c9b4732044591dbda0978e5fc3210beb98f1be93509289206e9980N
.dll windows:5 windows x86 arch:x86

54e28fad8476432d095553ebe251576f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\BUILDMACHINE\TESTMACHINE\MODULES\STANDALONEINNOINSTALLERMODULE\Builders\Thread_1\ewb\Release\webview.pdb

Imports

kernel32

CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
RtlUnwind
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetModuleFileNameW
WideCharToMultiByte
HeapFree
HeapAlloc
GetCurrentThread
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
WaitForSingleObjectEx
SetFilePointerEx
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
SetEvent
GetProcessHeap
GetStringTypeW
ReadConsoleW
SetStdHandle
WriteConsoleW
HeapSize
HeapReAlloc
CreateFileW
OutputDebugStringW
CreateThread
Sleep
GetTickCount
ReadFile
ResetEvent
LeaveCriticalSection
EnterCriticalSection
CloseHandle
ReleaseMutex
WaitForSingleObject
GetFileAttributesW
GetUserDefaultUILanguage
GetUserGeoID
LoadLibraryW
CreateMutexW
MulDiv
InterlockedDecrement
GetSystemDirectoryW
GetVolumeInformationW
LocalFree
GetComputerNameW
ExpandEnvironmentStringsW
SetEndOfFile
TryEnterCriticalSection
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect
DuplicateHandle
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
CreateTimerQueue
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
DecodePointer
GetLastError
RaiseException
FreeEnvironmentStringsW
MultiByteToWideChar

user32

ShowWindow
GetSystemMetrics
ReleaseDC
GetDC
SetRect

ole32

OleInitialize
OleUninitialize
OleSetContainedObject
OleLockRunning
OleCreate

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
ConvertSidToStringSidW
LookupAccountNameW
CryptReleaseContext
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
CryptGetHashParam

oleaut32

VariantInit
VariantClear
SysFreeString
SysAllocString

gdi32

GetDeviceCaps

Exports

Exports

_CREATE@16
_DESTROY@4
_GET_STRING@16
_GET_STRING_LENGTH@8
_GET_TITLE_BAR_HEIGHT@0
_SET_CACHE_PATH@8
_SET_CALLBACK@12
_SET_MACHINE_STAT@12
_SHOW@4

Sections

.text
Size: 458KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54e28fad8476432d095553ebe251576f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

ole32

advapi32

oleaut32

gdi32

Exports

Exports

Sections

.text Size: 458KB - Virtual size: 458KB

.rdata Size: 118KB - Virtual size: 117KB

.data Size: 9KB - Virtual size: 13KB

.gfids Size: 3KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 512B - Virtual size: 432B

.reloc Size: 21KB - Virtual size: 20KB

.text
Size: 458KB - Virtual size: 458KB

.rdata
Size: 118KB - Virtual size: 117KB

.data
Size: 9KB - Virtual size: 13KB

.gfids
Size: 3KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 512B - Virtual size: 432B

.reloc
Size: 21KB - Virtual size: 20KB