ChatGPT4[.]exe | Triage™

General

Target
ChatGPT4.exe
Size 10.9MB
Sample230603-cykr2afb95
SHA256 2fc949e23c1f908288f59ee5f760cb3d7634bb1cb473072916eb770c69c553d5
MD5 2cefa380de4493783aba97a50fee9a7f
SHA1 8a70e11e29739079e4f3425ef4f3692801e92033
SHA512 6efd5ccb47ee49072aa0777455e8845e78ea070abc1d9fb0bffeb061ae9b20226027a388023b381093cddb3774d323e6d71e1486ac8a247296eb0d0c5f270a5a
SSDEEP 196608:WoTlRxfE99KNqO2pb8KNkr26Wt2EpfbV0tO1Z0JEFVpOiG5pAt6mF:HTXm99KNqOgFNkr2d4EpfbqtO7t7ljtd
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

ChatGPT4.exe

.exe 10.9MB

ChatGPT4.exe

IMPHASH 4fda732de1b2293b2442d2996c840875
SHA256 2fc949e23c1f908288f59ee5f760cb3d7634bb1cb473072916eb770c69c553d5
MD5 2cefa380de4493783aba97a50fee9a7f
SHA1 8a70e11e29739079e4f3425ef4f3692801e92033
SHA512 6efd5ccb47ee49072aa0777455e8845e78ea070abc1d9fb0bffeb061ae9b20226027a388023b381093cddb3774d323e6d71e1486ac8a247296eb0d0c5f270a5a
SSDEEP 196608:WoTlRxfE99KNqO2pb8KNkr26Wt2EpfbV0tO1Z0JEFVpOiG5pAt6mF:HTXm99KNqOgFNkr2d4EpfbqtO7t7ljtd
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

58:05:14:20:72:d1:77:3b:6e:a6:22:ad:4a:54:59:b2:5c:24:87:60:a2:54:c6:89:42:cc:96:7f:12:93:21:45

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=ChatGPT_2023-6-2_15-19-1

Chains

Jun 2, 2023

Minor OS version

Major OS version

Entry point

1895284

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileW CloseHandle WriteFile DeleteFileW HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap SizeofResource LockResource LoadResource FindResourceW FindResourceExW CreateEventExW WaitForSingleObject SetEvent RemoveDirectoryW GetProcAddress GetModuleHandleW GetWindowsDirectoryW CreateDirectoryW GetTempPathW GetTempFileNameW MoveFileW GetLastError EnterCriticalSection LeaveCriticalSection GetModuleFileNameW DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetCurrentThreadId RaiseException SetLastError GlobalUnlock GlobalLock GlobalAlloc MulDiv lstrcmpW CreateEventW FindClose FindFirstFileW GetFullPathNameW InitializeCriticalSection lstrcpynW CreateThread LoadLibraryExW GetCurrentProcess Sleep WideCharToMultiByte GetDiskFreeSpaceExW DecodePointer GetExitCodeThread GetCurrentProcessId FreeLibrary GetSystemDirectoryW lstrlenW VerifyVersionInfoW VerSetConditionMask lstrcmpiW LoadLibraryW GetDriveTypeW CompareStringW FindNextFileW GetLogicalDriveStringsW GetFileSize GetFileAttributesW GetShortPathNameW SetFileAttributesW GetFileTime CopyFileW ReadFile SetFilePointer SetFileTime SystemTimeToFileTime MultiByteToWideChar GetSystemInfo WaitForMultipleObjects GetVersionExW VirtualProtect VirtualQuery LoadLibraryExA GetStringTypeW SetUnhandledExceptionFilter FileTimeToSystemTime GetEnvironmentVariableW GetSystemTime GetDateFormatW GetTimeFormatW GetLocaleInfoW CreateProcessW GetExitCodeProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW FormatMessageW GetEnvironmentStringsW LocalFree InitializeCriticalSectionEx LoadLibraryA GetModuleFileNameA GetCurrentThread GetConsoleOutputCP FlushFileBuffers Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection IsWow64Process SetConsoleTextAttribute GetStdHandle GetConsoleScreenBufferInfo OutputDebugStringW GetTickCount GetCommandLineW SetCurrentDirectoryW SetEndOfFile EnumResourceLanguagesW GetSystemDefaultLangID GetUserDefaultLangID GetLocalTime ResetEvent GlobalFree GetPrivateProfileStringW GetPrivateProfileSectionNamesW WritePrivateProfileStringW CreateNamedPipeW ConnectNamedPipe TerminateThread LocalAlloc CompareFileTime CopyFileExW OpenEventW PeekNamedPipe WaitForSingleObjectEx QueryPerformanceCounter QueryPerformanceFrequency EncodePointer LCMapStringEx CompareStringEx GetCPInfo GetSystemTimeAsFileTime IsDebuggerPresent InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree UnhandledExceptionFilter TerminateProcess GetStartupInfoW RtlUnwind TlsAlloc TlsGetValue TlsSetValue TlsFree ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetFileType LCMapStringW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation GetConsoleMode GetFileSizeEx SetFilePointerEx FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle ReadConsoleW WriteConsoleW GetProcessAffinityMask GetModuleHandleA GlobalMemoryStatus ReleaseSemaphore CreateSemaphoreW

Sharing