8f84b3ce0976107f62316fbbb3d6f674db6f55d3c4183ced4b79d8aeb14833a2

Sharing

Copy URL Twitter E-mail

General

Target
8f84b3ce0976107f62316fbbb3d6f674db6f55d3c4183ced4b79d8aeb14833a2
Size 70KB
Sample261014-c2fbqaeb82
SHA256 8f84b3ce0976107f62316fbbb3d6f674db6f55d3c4183ced4b79d8aeb14833a2
MD5 ee9d52e93cadefe74232f66b29e0d638
SHA1 92f8447b06f3f8939bad2e8f0d10efa1da9126bc
SHA512 d2fa693f353e4590303efc59ce9e928815a398d581afe490d6e04dd4b945324c73a2bc0fc72dc9a83bcde3289b2a90082f6ec7feab0a0ccf06ae272c54cc348c
SSDEEP 768:xbTKX0uekhxykrHDgw3UzjuOblpZuoP0uXn6bWtpJ3eR2wZU913/Uv5Dw:dfue8xykSDblpZuoPLKMpgYwe3/I5Dw
TLSH
T179639003A5498471EB1827722A25FAE6456ABD384BE4F1DFF6687D3869321C34D3318F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f84b3ce0976107f62316fbbb3d6f674db6f55d3c4183ced4b79d8aeb14833a2

File Explorer

8f84b3ce0976107f62316fbbb3d6f674db6f55d3c4183ced4b79d8aeb14833a2

.exe 70KB

8f84b3ce0976107f62316fbbb3d6f674db6f55d3c4183ced4b79d8aeb14833a2

IMPHASH 41efe3f2909309f28e9d39731196358f
SHA256 8f84b3ce0976107f62316fbbb3d6f674db6f55d3c4183ced4b79d8aeb14833a2
MD5 ee9d52e93cadefe74232f66b29e0d638
SHA1 92f8447b06f3f8939bad2e8f0d10efa1da9126bc
SHA512 d2fa693f353e4590303efc59ce9e928815a398d581afe490d6e04dd4b945324c73a2bc0fc72dc9a83bcde3289b2a90082f6ec7feab0a0ccf06ae272c54cc348c
SSDEEP 768:xbTKX0uekhxykrHDgw3UzjuOblpZuoP0uXn6bWtpJ3eR2wZU913/Uv5Dw:dfue8xykSDblpZuoPLKMpgYwe3/I5Dw
TLSH
T179639003A5498471EB1827722A25FAE6456ABD384BE4F1DFF6687D3869321C34D3318F
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17318

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Cef\chromium-87\vsbuild\Release\EasyRender.pdb

kernel32

GetTickCount64 DeleteCriticalSection QueryPerformanceCounter GetTickCount TlsFree InitializeCriticalSection TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer LeaveCriticalSection EnterCriticalSection CreateProcessA TlsSetValue GetCurrentThread RaiseException GetLastError GetCurrentProcess GetCurrentThreadId SuspendThread ResumeThread GetThreadContext SetThreadContext FlushInstructionCache VirtualAlloc VirtualProtect VirtualFree VirtualQuery SetLastError FreeLibrary GetModuleHandleW GetProcAddress LoadLibraryExW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _set_app_type _configure_wide_argv _initialize_wide_environment _get_wide_winmain_command_line _initterm _crt_atexit exit _exit __p___argc _c_exit _register_thread_local_exe_atexit_callback _register_onexit_function _invoke_watson terminate _initialize_onexit_table _controlfp_s abort _cexit _initterm_e

ws2_32

getaddrinfo inet_pton

easycef

GetProcessType SetHostResolverWork InitEasyCef SetSpeedUpWork

winmm

timeGetTime

api-ms-win-crt-heap-l1-1-0

_callnewh malloc calloc _set_new_mode free

api-ms-win-crt-math-l1-1-0

ceil __setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-string-l1-1-0

wcsncmp strcpy_s

Name

.text

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourd

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

8f84b3ce0976107f62316fbbb3d6f674db6f55d3c4183ced4b79d8aeb14833a2

kernel32

api-ms-win-crt-runtime-l1-1-0

ws2_32

easycef

winmm

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-string-l1-1-0

generic