Static task
static1
Behavioral task
behavioral1
Sample
Chordie for Windows.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Chordie for Windows.exe
Resource
win10v2004-20230220-en
General
-
Target
Chordie for Windows.exe
-
Size
3.6MB
-
MD5
81349239444301021ebb94bfa6dab063
-
SHA1
df55dfdc840e9ea6489eaf6603cc0fac37c0dd68
-
SHA256
cb56f5859551c6ac2e052f3d5037f70980d0c4597dbe4e7c44529e22598ac6c8
-
SHA512
f951f22f398fb0be5115f55498c6a8d720645e943953d106cf0559f9d39dd05ccf675bf8f8c17506ff84df736d96a427111179b36c1f0d37ba87793477efea73
-
SSDEEP
49152:N0hb9oDzTHeml2UQH/ZT4zhk5HOmAgTipBSJSBhLuu0:bDvlEZPYZl
Malware Config
Signatures
Files
-
Chordie for Windows.exe.exe windows x86
b98f2f5d82241aec288b5428d9d6a34d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
ReadFile
GetModuleFileNameW
CreateFileW
FlushFileBuffers
VerifyVersionInfoW
GetLastError
EnterCriticalSection
GetModuleHandleA
IsDebuggerPresent
QueryPerformanceFrequency
DeleteCriticalSection
GetCurrentThreadId
SetThreadAffinityMask
ReleaseMutex
GetCommandLineW
GlobalSize
GlobalLock
GlobalAlloc
GlobalUnlock
GetCurrentProcessId
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetOEMCP
GetACP
IsValidCodePage
GetProcessHeap
GetFileType
GetStdHandle
HeapSize
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
UnhandledExceptionFilter
GetCPInfo
RtlUnwind
RaiseException
GetCommandLineA
GetSystemTimeAsFileTime
GetTimeZoneInformation
IsProcessorFeaturePresent
LoadLibraryExW
ExitThread
CreateThread
GetModuleHandleExW
HeapReAlloc
HeapAlloc
HeapFree
GetStringTypeW
MultiByteToWideChar
DecodePointer
EncodePointer
WideCharToMultiByte
LeaveCriticalSection
GetLocaleInfoW
LoadLibraryW
TerminateThread
InitializeCriticalSection
WriteFile
OutputDebugStringW
QueryPerformanceCounter
VerSetConditionMask
SetUnhandledExceptionFilter
SetPriorityClass
FreeLibrary
TryEnterCriticalSection
CreateMutexW
ExitProcess
CloseHandle
GetThreadPriority
CreateEventW
LoadLibraryA
ResetEvent
GetProcAddress
SetThreadPriority
Sleep
GetPriorityClass
GetCurrentThread
SetEvent
WaitForSingleObject
GetCurrentProcess
GetConsoleCP
SetEnvironmentVariableA
user32
DefWindowProcW
CreateWindowExW
PeekMessageW
SendMessageTimeoutW
DispatchMessageW
AttachThreadInput
GetWindowThreadProcessId
GetWindowTextW
TranslateMessage
EnumWindows
SetFocus
GetFocus
PostMessageW
GetMessageW
ReleaseDC
GetDC
DestroyWindow
GetMessageTime
GetMonitorInfoW
DestroyIcon
ToUnicode
UnregisterClassW
SetClipboardData
SendMessageW
SetCaretPos
IsWindowVisible
GetSystemMetrics
ReleaseCapture
OpenClipboard
CreateCaret
GetActiveWindow
ShowWindow
SetLayeredWindowAttributes
EnumChildWindows
GetCursorPos
SetWindowPos
DestroyCaret
DestroyCursor
RedrawWindow
EmptyClipboard
EnableMenuItem
SystemParametersInfoW
GetClipboardData
GetAncestor
SetCursorPos
InvalidateRect
GetAsyncKeyState
GetWindowPlacement
GetForegroundWindow
RegisterClassExW
GetWindowLongW
SetWindowLongW
SetWindowTextW
GetDesktopWindow
WindowFromPoint
MessageBeep
GetWindowInfo
LoadCursorW
TrackMouseEvent
GetParent
SetForegroundWindow
SetCapture
IsChild
GetWindowRect
ScreenToClient
GetSystemMenu
MapVirtualKeyW
GetUpdateRgn
CloseClipboard
EnumDisplayMonitors
SetCursor
EndPaint
GetMessagePos
GetKeyboardState
GetCapture
ShowCaret
BeginPaint
CreateIconIndirect
gdi32
SetMapMode
GetOutlineTextMetricsW
SetMapperFlags
GetKerningPairsW
AddFontMemResourceEx
GetGlyphOutlineW
GetGlyphIndicesW
StretchDIBits
CreateCompatibleDC
CombineRgn
CreateRectRgnIndirect
GetRegionData
CreateBitmap
ExcludeClipRect
CreateDIBSection
SelectObject
RemoveFontMemResourceEx
DeleteObject
GetDeviceCaps
CreateFontIndirectW
DeleteDC
GetTextMetricsW
RestoreDC
CreateRectRgn
SaveDC
shell32
ExtractAssociatedIconW
ole32
RegisterDragDrop
RevokeDragDrop
OleUninitialize
OleInitialize
CoTaskMemFree
PropVariantClear
CoCreateInstance
winmm
midiInOpen
midiInGetNumDevs
midiInUnprepareHeader
midiInStart
midiInPrepareHeader
midiInReset
midiInGetDevCapsW
midiInClose
midiInStop
midiInAddBuffer
timeGetTime
timeBeginPeriod
imm32
ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME
ImmReleaseContext
Sections
.text Size: 960KB - Virtual size: 960KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ