_cgo_dummy_export
Static task
static1
Behavioral task
behavioral1
Sample
Chater_Rqst_rh_0.4.1 4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Chater_Rqst_rh_0.4.1 4.exe
Resource
win10v2004-20221111-en
General
-
Target
Chater_Rqst_rh_0.4.1 4.exe
-
Size
1.7MB
-
MD5
fc0ef831ee6dcd34f1cc1e3b484b139b
-
SHA1
c864404fddc9e946a52cbc4c54c1b450e70d76b0
-
SHA256
2a99f25f4212f53d7479bfb140c572ca9f44394fbc4817743b1338cddf95a2d6
-
SHA512
6438c021d82def59fd9aa087e301c0ebafd9dfadc59ba4cc645c92634d19040426159357654f11614bcb649c8da51cc1f4f3e264d3be87472c4e3ef70308c0a7
-
SSDEEP
24576:eK5eCX7JpFCcuBLN/TrReV1sHXLgAE4SDExTwoOFzJg4J2Yq1/FcULgBi/E7V+AR:ejTfecT3OuYq12UqIg
Malware Config
Signatures
Files
-
Chater_Rqst_rh_0.4.1 4.exe.exe windows x86
17313317e229ffec057940a6bd7ff060
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateFileA
CreateFileW
CreateIoCompletionPort
CreateThread
CreateWaitableTimerExW
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeEnvironmentStringsW
GetCommandLineA
GetConsoleMode
GetEnvironmentStringsW
GetLastError
GetModuleFileNameA
GetProcAddress
GetProcessAffinityMask
GetProcessHeap
GetQueuedCompletionStatusEx
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetTempFileNameW
GetTempPathW
GetThreadContext
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedExchangeAdd
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
PostQueuedCompletionStatus
ResumeThread
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetProcessPriorityBoost
SetThreadContext
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SuspendThread
SwitchToThread
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WriteConsoleW
WriteFile
lstrcatW
msvcrt
_strdup
_stricoll
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__p__pgmptr
__set_app_type
_beginthread
_cexit
_errno
_fpreset
_fullpath
_iob
_isctype
_msize
_onexit
_pctype
_setmode
_snwprintf
abort
atexit
calloc
fprintf
free
fwrite
malloc
mbstowcs
memcpy
memmove
memset
setlocale
signal
strcoll
strlen
tolower
vfprintf
wcstombs
free
realloc
Exports
Exports
Sections
.text Size: 715KB - Virtual size: 715KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 717KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 174KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ