universalbrowser[.]exe

General

Target
universalbrowser.exe
Size 115KB
Sample260714-pk5lhaey21
SHA256 3c285c3fd881cc3bfa5796593310c80844ce3c85cb4b8c033b8d4c033a0a7360
MD5 2252f024521dfee2ccf057282cc16caf
SHA1 648418169769c8a0a6b0331d23129b288e5aed28
SHA512 b4acd684fff01604b877e33871620bdeb4137355eeb1aa90fe73290f8b87104c695b0dc20b3124f8803abf8cdb90384e0f70507877b7d8f2812c105620fe0a48
SSDEEP 1536:OvfJZp5x5J503rHjvbnjK3rHjvbnjV3rHjvbnj3QaA0ova+GLETj19x5N0iH+BOV:OvMtl9hN0iH+gYQrtUIKR+AeFgYyCdy
TLSH
T1A7C34A1B77E530F8D4B6C678C5610A5ADB72B8350B609FEF03A40A151F236E18D3EB66
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
universalbrowser.exe

File Explorer

universalbrowser.exe

.exe 115KB

universalbrowser.exe

IMPHASH a1b55d1df44fa29677d5a6c9fbd9aa27
SHA256 3c285c3fd881cc3bfa5796593310c80844ce3c85cb4b8c033b8d4c033a0a7360
MD5 2252f024521dfee2ccf057282cc16caf
SHA1 648418169769c8a0a6b0331d23129b288e5aed28
SHA512 b4acd684fff01604b877e33871620bdeb4137355eeb1aa90fe73290f8b87104c695b0dc20b3124f8803abf8cdb90384e0f70507877b7d8f2812c105620fe0a48
SSDEEP 1536:OvfJZp5x5J503rHjvbnjK3rHjvbnjV3rHjvbnj3QaA0ova+GLETj19x5N0iH+BOV:OvMtl9hN0iH+gYQrtUIKR+AeFgYyCdy
TLSH
T1A7C34A1B77E530F8D4B6C678C5610A5ADB72B8350B609FEF03A40A151F236E18D3EB66
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

16196

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetModuleFileNameA WriteFile lstrlenA CreateMutexA WaitForSingleObject lstrcmpA lstrcatA GetModuleHandleA Sleep GetLastError GetFileAttributesA CreateFileA TerminateThread LoadLibraryA QueryPerformanceFrequency GlobalAlloc lstrcpyA GlobalFree CloseHandle GetSystemInfo CreateThread GetProcAddress GlobalLock ExitProcess GlobalMemoryStatusEx lstrcmpiA GetDiskFreeSpaceExA CreateDirectoryA QueryPerformanceCounter GlobalUnlock WriteConsoleW CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap LCMapStringW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle GetModuleFileNameW GetCurrentProcess TerminateProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect

user32

DispatchMessageA wsprintfA OpenClipboard CloseClipboard EmptyClipboard DefWindowProcA GetMessageA TranslateMessage GetClipboardData SetClipboardData IsClipboardFormatAvailable PostQuitMessage RegisterClassExA CreateWindowExA

Name

.text

Size

63KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

universalbrowser.exe

kernel32

user32

generic