0db6c2867b6f7ca2d272bb55941d771e7c9791cbe468ef02d392033a73c68b2b

Sharing

Copy URL Twitter E-mail

General

Target

0db6c2867b6f7ca2d272bb55941d771e7c9791cbe468ef02d392033a73c68b2b
Size

5.7MB
MD5

c6930746aefd8eb98e72831c17fd82f1
SHA1

ac5df78e7ec6c83eb7cfbf77b3fa2f0e0f278055
SHA256

0db6c2867b6f7ca2d272bb55941d771e7c9791cbe468ef02d392033a73c68b2b
SHA512

7051e6b4b56f6e5903effe68000a87840a85f51290ce72f2a657b2e33a4fcfd77b4bee8e0a814e635577236c77aae524de0787587bb5ec6392588dc0f08f93b4
SSDEEP

49152:qhqx5T4X4Rl0Sr0UR+4iD8C6PY/T9Fc9G+ESq6qGfgAdkBCQ/gaYFD:VDS6PY/T9Fc9GTSqdGfguIuaYF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0db6c2867b6f7ca2d272bb55941d771e7c9791cbe468ef02d392033a73c68b2b

Files

0db6c2867b6f7ca2d272bb55941d771e7c9791cbe468ef02d392033a73c68b2b
.dll windows:5 windows x86 arch:x86

7c3530560c58b9ec42cb315429489ec4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayGetElemsize
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit
GetErrorInfo
SysFreeString

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegUnLoadKeyW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegConnectRegistryW
RegCloseKey

user32

MessageBoxA
CharNextW
LoadStringW
SetClassLongW
GetClassLongW
SetWindowLongW
GetWindowLongW
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCaret
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
InsertMenuItemW
InsertMenuW
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameW
GetClassInfoExW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EndMenu
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CreateAcceleratorTableW
CopyImage
CopyIcon
CloseClipboard
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharUpperW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow

kernel32

Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
VerSetConditionMask
VerifyVersionInfoW
TryEnterCriticalSection
SwitchToThread
SuspendThread
Sleep
SizeofResource
SetThreadPriority
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
RaiseException
IsDebuggerPresent
MultiByteToWideChar
MulDiv
LockResource
LocalFree
LoadResource
LoadLibraryA
LoadLibraryW
LeaveCriticalSection
IsValidLocale
InitializeCriticalSection
HeapSize
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryW
GetVersionExW
GetVersion
GetTimeZoneInformation
GetTickCount
GetThreadPriority
GetThreadLocale
GetSystemTimes
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileAttributesW
GetExitCodeThread
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCPInfoExW
GetCPInfo
GetACP
FreeResource
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumSystemLocalesW
EnumResourceNamesW
EnumCalendarInfoW
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateFileW
CreateEventW
CompareStringA
CompareStringW
CloseHandle
Sleep

gdi32

UnrealizeObject
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetEnhMetaFileBits
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
Chord
BitBlt
ArcTo
Arc
AngleArc
AbortDoc

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CoCreateInstance
CoUninitialize
CoInitialize
IsEqualGUID

comctl32

InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create

shell32

ShellExecuteW
Shell_NotifyIconW
SHGetSpecialFolderLocation
SHGetPathFromIDListW

winspool.drv

OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
GetDefaultPrinterW

Exports

Exports

A4gh0iYINRqNBPBa0PJroB
A4rSjfaUpFs8OcrL2
AbzfnHGUDhJRsu6b0LVxlhIEvJKcy7
AqnlP7DgOELl2P2sxSlxb12dk
AyL05dP59CtYIkEA
B9mxOqeKXQTSEWERFt
BHuM0ScO8JtC6blB1iA
BQXmfFXNoKp0ZS4fEcxBhBQx
BpfdHhUxEFxuQsKFP
BrMAhd2wT3wU9QDaAbKthgBtGp
CEmlhlSV7MLVe254mn
CavIDa03pKkCuyRV7nVe
CdUEDeno5d6gTHPd3PIaDNO
CfuYTpQJ7gOZgZ0eXzybiKg
DKCegwLiEpStO4hRtFoCAW
DZFrVL4IU0osvNDa
Ds9gERHiaTtl9UbdlSA0AyPSxRY
EYVDBRyg4rbnSFusy3b81MxOHAJW9ty
F2rGgHa3OSXWhfmZm7AEGIoPFXmqS
F4PefCX9CR4pIa0y3jOr2ddoV
FBGL5uDQJDRW9rHH6LYg
GetHandleVerifier
GhImrWPIimnW1fKMUOsmn1
HGve9M18ZVhQGgdtSOv9bh5zz
HwJVWrLB4j9D7nB7TGoDpYga
IIiVdxyxqKXXzWJFgilJ
IsSandboxedProcess
JGLn0obI6u1EDWLy1jhk02B4O
JSAqWqMQDHwg7zWqCHxTP0HtkON8
JX8WTN17RnumUc11g
Jfm6EpxFHpHDC1Nql50f02Tqw
KBuSHDC0BSVC0Dx9
KI2dJBxULrqXTH09WakLN
KVv5HXZIDyZbXQSDI7UV7ts
KfEbZtHcR4uwKTz2iu9pdFq2GtFBe
KiaKYqAejkRtvuadw
Kyc7wfpraol8b0spp
LLrMgdu57CKf9TZbDVkJvAd4nf
LyQ1ajbzXsrBVSW6jPZzU
MGqr9YocydcVnI93V8
MWbxKBn9HWuaypoHcxsuD54XaZAZ
MXrt0PZveNLMPYcEJS5T
MaSjJWKqdVsnqe7Sume
Mgfjg4z89ri46f0ESGa
MwdhTcZT7uGNFzma
MyHWnkHfkMz9kbtrPrLT4yF0pEemF
NCsAmYmeUl8M3SbLlshHb0fJul6ro
NRu78QMVu2EQVEe7aXdyAd
NUZQcctNRixUR2RnFJQgvsz7ycn
NYqmmMA2rj86MkBz8p5D2
NgpP8k0wrFN0rDyf3wfY42HUfjQGg
NhF85CtspTycfYVhb9f97L9akdUxntq
NhafBHUcWUp9BzeoTRhxfOQVNY5Isf
NsrBB2KlSk74TwDKyh0yrS4mtnL0N88
OCQED9NxOgIsIoay
Oc3jVnZ1W1W57oez
OlPrCin7Mu7jSIVNNS7Os5w9bvBqzV9
PAUOkjzrNIUd3YXqLUurW
PIvpy3EhWBgJxZxXh5Nxf9X
PZ7Xrt35iEPWaI3WY
Pak8sxTaWhvx6U2JEacGQCJN
PmURC5GnRj3RBnmzIpveoL
PvLl2pRwVkbmNcSRW5d29RNuIdO
QBBxarYFpO08gY6BJANxFtPtLsaBhJc
QJYDWoBESvp14pOoPuEIQ80qZtx39
QfyPZvC0ygQ0B418lScK7OPYYaWe
QgKettj7CI9WBPKdltZF
QxCBxlB55X0K2n9ZFhuRUem8XXyuHB
QxNKc0xxiwnF79S0a
RelaunchChromeBrowserWithNewCommandLineIfNeeded
RkDZg3093ki8OPxNa7JJYXHMD
S1CnXeOwbL2KF39YcICJMN
S1VkCO9cdjWltftwdS26kv3VjzHt
SAb8qV7mZ6srXqUG
Sy24Qs8o1tu6yXlMnfMnpsM
T2nJBZLh1aX1OxhjsV
TMethodImplementationIntercept
TddNedt8QW4xwKM9o
U1Qi1uC6ZpXpwoUFrgrGMS6xP4JPx7
UAHlP7EYnypE26gKUSc
UKGFfZhQbRfOpF28UCKXhIzZ
UU5OI2nxue7HJeKUvd3vW06HcFVq7bE
UV2em3xl50KXBHsQCS
UZgAK5bLG4vIAnA5Z67HqEb6
VZ3bBdm5pydEqLnOaQm2cn
W0dfGQtvLvZ0pFWn
WEEHOcnfjwUqwLcBafjgzTeVI7
Wg47jAAluTP8GyRs
Wm8NnykWqewtIkvxZRjhC
WxIXbBkS73iKemzAdt93rlXu3q
XDWdBKmXubxbv4cEC58kY
XaE436sY1nHVGLV0Eky3l
XupR31b5lSYUsWn1D7897sCrh4QMAr
Y09OmRQOOsntgAsAqC73JVZH6D6Hr
YBScJh459Z0Dx6YMPAhTI3bvzDHM
YjikJ0ujQmJj5ZJyE41A9E
YxzfEyDVcJ14ea9LTx2p7wpr2tv
YyerfNS45Ptb2bWr1C3F9mHFham
Z9PjmRWq5clRxUGt18AcsnyODrfi33C
ZRDHANtovpPg3ZUfSd
ZuxGdZGFvJcHDwVpItf0Tit9eqU5Agi
aTymNrcJoSHf1IJvBGrmsANNsKgTn
acxcuhgP2A351KuL
ahSVXa29GtEU9ppnbXKgJsJgoW
akPRpJ8xmYlpbts7nOxf
avXvPcFEr1UwPVAt5
b4eDnBnPfGhQEmGPhhbn
b7aae46oXVkzwOFNhwRl
bOJLRiRcpMQyRBKEK1xvz
bfSnkO4WvO16Q00210dG
brllN9Eqb4JmOZTi
btPKewmhavJXi7ldGg6WivaB0LUTQF
c0Rhyj4eZA2edFySOHCiWM
c2tk0ciPwuOFhjjb8tx90wLfL8p
cef_add_cross_origin_whitelist_entry
cef_api_hash
cef_base64decode
cef_base64encode
cef_begin_tracing
cef_binary_value_create
cef_browser_host_create_browser
cef_browser_host_create_browser_sync
cef_browser_view_create
cef_browser_view_get_for_browser
cef_clear_cross_origin_whitelist
cef_clear_scheme_handler_factories
cef_command_line_create
cef_command_line_get_global
cef_cookie_manager_create_manager
cef_cookie_manager_get_blocking_manager
cef_cookie_manager_get_global_manager
cef_crash_reporting_enabled
cef_create_context_shared
cef_create_directory
cef_create_new_temp_directory
cef_create_temp_directory_in_directory
cef_create_url
cef_currently_on
cef_delete_file
cef_dictionary_value_create
cef_directory_exists
cef_display_get_alls
cef_display_get_count
cef_display_get_matching_bounds
cef_display_get_nearest_point
cef_display_get_primary
cef_do_message_loop_work
cef_drag_data_create
cef_enable_highdpi_support
cef_end_tracing
cef_execute_java_script_with_user_gesture_for_tests
cef_execute_process
cef_format_url_for_security_display
cef_get_current_platform_thread_handle
cef_get_current_platform_thread_id
cef_get_extensions_for_mime_type
cef_get_mime_type
cef_get_min_log_level
cef_get_path
cef_get_temp_directory
cef_get_vlog_level
cef_image_create
cef_initialize
cef_is_cert_status_error
cef_is_cert_status_minor_error
cef_is_web_plugin_unstable
cef_label_button_create
cef_launch_process
cef_list_value_create
cef_load_crlsets_file
cef_log
cef_menu_button_create
cef_menu_model_create
cef_now_from_system_trace_time
cef_panel_create
cef_parse_json
cef_parse_jsonand_return_error
cef_parse_url
cef_post_data_create
cef_post_data_element_create
cef_post_delayed_task
cef_post_task
cef_print_settings_create
cef_process_message_create
cef_quit_message_loop
cef_refresh_web_plugins
cef_register_extension
cef_register_scheme_handler_factory
cef_register_web_plugin_crash
cef_register_widevine_cdm
cef_remove_cross_origin_whitelist_entry
cef_request_context_create_context
cef_request_context_get_global_context
cef_request_create
cef_resource_bundle_get_global
cef_response_create
cef_run_message_loop
cef_scroll_view_create
cef_server_create
cef_set_crash_key_value
cef_set_osmodal_loop
cef_shutdown
cef_stream_reader_create_for_data
cef_stream_reader_create_for_file
cef_stream_reader_create_for_handler
cef_stream_writer_create_for_file
cef_stream_writer_create_for_handler
cef_string_ascii_to_utf16
cef_string_ascii_to_wide
cef_string_list_alloc
cef_string_list_append
cef_string_list_clear
cef_string_list_copy
cef_string_list_free
cef_string_list_size
cef_string_list_value
cef_string_map_alloc
cef_string_map_append
cef_string_map_clear
cef_string_map_find
cef_string_map_free
cef_string_map_key
cef_string_map_size
cef_string_map_value
cef_string_multimap_alloc
cef_string_multimap_append
cef_string_multimap_clear
cef_string_multimap_enumerate
cef_string_multimap_find_count
cef_string_multimap_free
cef_string_multimap_key
cef_string_multimap_size
cef_string_multimap_value
cef_string_userfree_utf16_alloc
cef_string_userfree_utf16_free
cef_string_userfree_utf8_alloc
cef_string_userfree_utf8_free
cef_string_userfree_wide_alloc
cef_string_userfree_wide_free
cef_string_utf16_clear
cef_string_utf16_cmp
cef_string_utf16_set
cef_string_utf16_to_lower
cef_string_utf16_to_upper
cef_string_utf16_to_utf8
cef_string_utf16_to_wide
cef_string_utf8_clear
cef_string_utf8_cmp
cef_string_utf8_set
cef_string_utf8_to_utf16
cef_string_utf8_to_wide
cef_string_wide_clear
cef_string_wide_cmp
cef_string_wide_set
cef_string_wide_to_utf16
cef_string_wide_to_utf8
cef_task_runner_get_for_current_thread
cef_task_runner_get_for_thread
cef_textfield_create
cef_thread_create
cef_time_delta
cef_time_from_doublet
cef_time_from_timet
cef_time_now
cef_time_to_doublet
cef_time_to_timet
cef_trace_counter
cef_trace_counter_id
cef_trace_event_async_begin
cef_trace_event_async_end
cef_trace_event_async_step_into
cef_trace_event_async_step_past
cef_trace_event_begin
cef_trace_event_end
cef_trace_event_instant
cef_translator_test_create
cef_translator_test_ref_ptr_library_child_child_create
cef_translator_test_ref_ptr_library_child_create
cef_translator_test_ref_ptr_library_create
cef_translator_test_scoped_library_child_child_create
cef_translator_test_scoped_library_child_create
cef_translator_test_scoped_library_create
cef_unregister_internal_web_plugin
cef_uridecode
cef_uriencode
cef_urlrequest_create
cef_v8context_get_current_context
cef_v8context_get_entered_context
cef_v8context_in_context
cef_v8stack_trace_get_current
cef_v8value_create_array
cef_v8value_create_array_buffer
cef_v8value_create_bool
cef_v8value_create_date
cef_v8value_create_double
cef_v8value_create_function
cef_v8value_create_int
cef_v8value_create_null
cef_v8value_create_object
cef_v8value_create_string
cef_v8value_create_uint
cef_v8value_create_undefined
cef_value_create
cef_version_info
cef_visit_web_plugin_info
cef_waitable_event_create
cef_window_create_top_level
cef_write_json
cef_xml_reader_create
cef_zip_directory
cef_zip_reader_create
cfrReHMrmDfNMA4l
d8eam9RnhZgtXFP7
dKGsuK2zyQYLXiv6vA5wQ1q5VJvSiqT
dcLb8imSSu1KAFTTQaLX
eDem6SLxTJ3lvXoh1qc20puS
eZOWVL8XC8nFH2HDmWRtGlAazSu1pD
ekZjjk8qgq7bXV1Q35Uxj
etZvkBzss30bdcvtN9fKyPXOLJNSBe
g00iNDMbHbIZ4thhhstAR4
gIRFACrWIzt1JOtYf38McRXGYZ
gfNFsnRibwK95L3rQ9TrS9
h08R8By9u8f9kj1nsQSjFe7T
hA2Pod2aynktaVogfuhi
hMTHNMkRZFtve1BExFVBCUnPTyOL
hQaXQgJ6AyVLshbk
hhvz9pc9n7qaRN9KC
iMJvFpUa47jGAkKHeUsAWGgC
ilCQ24RCzuS5EMWFX8dd
j1fU3h8hxveo91d8
jAAgvLwKUDKuBUR7Y2RYplhs9EO
ji5iNEnpE36yT21ZVVHk6K
jpHK95Jtlh50WMh1
jxTwUFtC6FQSpb2qXin4Tm7c
kOGj5JZi6KBqWkn2b
khJMODoAPfIfX3GQDjMBS4ZfXZIuL
knmpTwz3cVkWKTdBc
krWgy0xyEnWyqPN6XNXqzAoGEUYuHS
kv0n5DmhLF46Npq5MDvmHECS
lIEPerW6RRizKapm76zPLRNtmgv9aD
lPA3sbKFCp5kIfhdSHnxQ6zGJetI
lVPIG09m1JjgvfLDimhv2ZQeRh
lW8v1aC8eYaMArzYZj3AoXd34Rqaf
lXOdDnrpBicXeQdWLFg
mTsRB7W7t6jEVo5X
mobk8jPIXWsRlAtvT0zUKU
nXiNIKh9hX5IwV76P4dpGxJuhGJ1Y5
ngfNMVmrd1mbtcWQiJ9jhvaDb
nzNLSBR65YTZIJ7jG
nzYqibJZhSEPQzK7idk6BdT5KiY
oAug67QnH3Mc0QgVIWl0K
oJNrr88wCXNuZ1AjJzVFb
oMJDq8VCfNExc884ZU
oTLS22AXXpNttr0TZpst
pUzZfazaPaZ59Xck9XWjY5
q0MAcz2ULY1SgdAG
q2Dp8rL6PrSYEcifiaFc8fVgCXCOgy
qXC2I5j0leVv5e3Te2dP
rQawVD2xGX0LTSx4jhAVoeK7Uop6b
reKpOmknlS55gYUn
rrJFUlMeX0sdMbUjFnHVbYIk0V7
sA4iedMSwF7IKNfC
sPCLnFr70tfjmO5DFVMdIQXD0TG1
sSNY5asJUMuwLhoQpvmB
tWug4PGXcWsm9NVY0M
taATmJlmO7ZcKeBPiF
tifT0HpCere9QwGG1VPaqWYsww
tkYGrXGI3Z0C1nC7hFHE
uK3LSARK3n5XfM1QEbtbLdrbjJCi
vAnExi2E20w5zjMRRM
vEJp1U71TNL4dM5pRqUMbQA2xyzFow
vZt5MwpoGKiLuRzWlHnmy
vdUtFsaL29irR5pk9U
vk0J11pbInUwrSSJvIqLrDQm5A7czqR
vygtNSrbWkylynoF5Y0QQhSXdGsTSR
w7kpo03iY6CtKA3YnvBXJw8AH
wUIqFxKrbgSADM8eIlfzZLcAw2qfL
wzvsNzBNT4HVMKZv07vpg5DYVVPJO
xnQHarYEeTCqb15YGwZ36D8FKmQRDi
xtZbhUKrztyoJdCt35KQzHz
y14JNZNQbAXw2IerGW1EA4cGh
yKsZR6cXB5ilNKOdNnz7KwP
yUouT3OJHyIu3D5FJVU4EjylsUP7
yfpxrGnL7Zd4HcUWt0H
yxDlXRRSWcyhIBsKK7V9nKZWJV8E
zFH3sZyrfYCgbi3OJotYSpBNDWZMAg3
zbQRbKNRVLDA8EJniGZ
zhc5F4rdROPhr3zsF
zydt4bTcUYPXIDdgfOYv
zzZeUAuELUHKCXpzRgR3iNDOa9

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 22KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 464KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c3530560c58b9ec42cb315429489ec4

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

ole32

comctl32

shell32

winspool.drv

Exports

Exports

Sections

.text Size: 5.1MB - Virtual size: 5.1MB

.itext Size: 9KB - Virtual size: 8KB

.data Size: 27KB - Virtual size: 26KB

.bss Size: - Virtual size: 22KB

.idata Size: 14KB - Virtual size: 14KB

.didata Size: 2KB - Virtual size: 2KB

.edata Size: 13KB - Virtual size: 13KB

.rdata Size: 512B - Virtual size: 69B

.reloc Size: 464KB - Virtual size: 464KB

.rsrc Size: 89KB - Virtual size: 89KB

.text
Size: 5.1MB - Virtual size: 5.1MB

.itext
Size: 9KB - Virtual size: 8KB

.data
Size: 27KB - Virtual size: 26KB

.bss
Size: - Virtual size: 22KB

.idata
Size: 14KB - Virtual size: 14KB

.didata
Size: 2KB - Virtual size: 2KB

.edata
Size: 13KB - Virtual size: 13KB

.rdata
Size: 512B - Virtual size: 69B

.reloc
Size: 464KB - Virtual size: 464KB

.rsrc
Size: 89KB - Virtual size: 89KB