772d73b0044b44229b87802afbe7ad494fa8463ece003481a20b8fd1e4a64f2b

Sharing

Copy URL Twitter E-mail

General

Target
772d73b0044b44229b87802afbe7ad494fa8463ece003481a20b8fd1e4a64f2b
Size 295KB
Sample260905-eecy7aek6z
SHA256 772d73b0044b44229b87802afbe7ad494fa8463ece003481a20b8fd1e4a64f2b
MD5 fe28be33bcdf83d07d5d5103fa258e7d
SHA1 b494a2ff1dc2976b1634492dd02ecc737313dd8a
SHA512 bbe34484a6e9d2f782a07c3221563a95a88befb027ac4c0a419491f0005ed7eaddcb8d72ff6a171757fa016b9b6c51ca1113b00043e2e2c8a137fdd907911797
SSDEEP 6144:l0GpevZRR6BqgMSFnx8ldi3uWe0dCrRLn01wlF976c+:l0GpehRRwpnx8ldWuWe0dCl1F9d+
TLSH
T1B054F66577A9C42BC99125B35CBAD6EF112DF6940F64E6C3A7882F6FC9B04C10A3112F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
772d73b0044b44229b87802afbe7ad494fa8463ece003481a20b8fd1e4a64f2b

File Explorer

772d73b0044b44229b87802afbe7ad494fa8463ece003481a20b8fd1e4a64f2b

.exe 295KB

772d73b0044b44229b87802afbe7ad494fa8463ece003481a20b8fd1e4a64f2b

IMPHASH f45916d5dd03905057d4af949b3938b2
SHA256 772d73b0044b44229b87802afbe7ad494fa8463ece003481a20b8fd1e4a64f2b
MD5 fe28be33bcdf83d07d5d5103fa258e7d
SHA1 b494a2ff1dc2976b1634492dd02ecc737313dd8a
SHA512 bbe34484a6e9d2f782a07c3221563a95a88befb027ac4c0a419491f0005ed7eaddcb8d72ff6a171757fa016b9b6c51ca1113b00043e2e2c8a137fdd907911797
SSDEEP 6144:l0GpevZRR6BqgMSFnx8ldi3uWe0dCrRLn01wlF976c+:l0GpehRRwpnx8ldWuWe0dCl1F9d+
TLSH
T1B054F66577A9C42BC99125B35CBAD6EF112DF6940F64E6C3A7882F6FC9B04C10A3112F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

192715

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\code\workspace\mbcef\output\cef73webhelper.pdb

msvcp140

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Xlength_error@std@@YAXPBD@Z

libcef

cef_string_utf16_to_utf8 cef_string_utf16_clear cef_string_utf16_set cef_string_utf16_cmp cef_string_utf8_to_utf16 cef_string_utf8_clear cef_string_userfree_utf16_free cef_api_hash cef_execute_process cef_string_list_alloc cef_string_list_free cef_log cef_v8value_create_string cef_v8value_create_function cef_v8context_get_current_context cef_process_message_create cef_string_map_alloc cef_string_map_free cef_string_multimap_key cef_string_list_append cef_string_multimap_value cef_string_map_append cef_string_list_value cef_string_list_size cef_string_map_size cef_string_multimap_size cef_string_map_value cef_string_map_key cef_string_multimap_append cef_string_multimap_alloc cef_string_multimap_free

vcruntime140

memcpy _CxxThrowException __current_exception _purecall memmove __current_exception_context memset _except_handler4_common __std_exception_destroy __std_exception_copy __std_terminate __CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

exit _initterm_e _initterm _get_wide_winmain_command_line _initialize_wide_environment _initialize_onexit_table _set_app_type _seh_filter_exe _cexit _c_exit _register_thread_local_exe_atexit_callback _invoke_watson _crt_atexit _register_onexit_function _configure_wide_argv _controlfp_s terminate _exit

api-ms-win-crt-heap-l1-1-0

free _set_new_mode malloc _callnewh

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW

Sharing

General

Malware Config

Signatures

File Explorer

772d73b0044b44229b87802afbe7ad494fa8463ece003481a20b8fd1e4a64f2b

msvcp140

libcef

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

kernel32

generic