Behavioral task
behavioral1
Sample
chisel_packed.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
chisel_packed.exe
Resource
win10v2004-20230220-en
General
-
Target
chisel_packed.exe
-
Size
2.3MB
-
MD5
75c0462522653b3e61f9e9ee39a73e98
-
SHA1
899395d081717fea616a04a411bddda05473e43f
-
SHA256
26594beb7d813e8da304214c4f82b53da474b6e6be791fc72ab43c1049e7ac96
-
SHA512
0d734d2b8d3a15af4bdc501049678235e5bd986cfb68d8c2cc306c022bcf6170f0b2db9b90fe33bd8e6ce0e81d7dcfcab6943385bffe4bd195dbb8db9c5bef8e
-
SSDEEP
49152:Xv6im8hddKueMM2d2fVPn0EWz+ULKp9QDLhI6D3cQQDNzyQc02:XvDGuO32EWpI9sLhIETW1e0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource chisel_packed.exe
Files
-
chisel_packed.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE