ch3atHUB[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ch3atHUB.exe
Size

700.0MB
MD5

127bbac445b78dba5c920efb6bf5e257
SHA1

48222be347f6cb4bc515bc99a69a8c39564debfb
SHA256

7cfd66bbbd7fff34948bb5485d8e61540a73b67c9f58274241829fb398da5210
SHA512

23e402e718695d4b9cb45ad9b98352d132c20ce37a78bd81d71eaa5f75c86ffa420429a751a40ad1d4877b30f60cc7b595bb3dc2e80ade453ecd3480b1bbf297
SSDEEP

384:mTk6/YsWO31H2v0tF2gBX8MSt3CWCcjR:mAkYsHsMFTsLoWC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ch3atHUB.exe

Files

ch3atHUB.exe
.exe windows:4 windows x86 arch:x86

de6b23a41102183991cc6dfa96c4d7e3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__setusermatherr
_iob
abort
calloc
fprintf
free
fwrite
signal
strncmp
vfprintf
__getmainargs
__initenv
__p__acmdln
__p__commode
__p__fmode
__set_app_type
_amsg_exit
_cexit
_commode
_fmode
_fpreset
_initterm
_onexit
exit
malloc

advapi32

AuditComputeEffectivePolicyBySid
BuildTrusteeWithObjectsAndNameA
OperationStart
PerfCreateInstance

comctl32

ImageList_Write
Str_SetPtrW

compstui

CommonPropertySheetUIA
CommonPropertySheetUIW
SetCPSUIUserData

cryptui

CryptUIDlgViewSignerInfoW
CryptUIFreeCertificatePropertiesPagesA

dinput8

DirectInput8Create

dwmapi

DwmDefWindowProc

gdi32

D3DKMTCheckVidPnExclusiveOwnership

ieframe

DllRegisterServer
DllUnregisterServer
HlinkFrameNavigateNHL

mmcndmgr

CreateExecutivePlatform

msftedit

CreateTextServices
DllGetActivationFactory
IID_ITextServices2
MathTranslate
RichEdit10ANSIWndProc
RichEditANSIWndProc

mshtml

ShowModalDialog
TravelLogCreateInstance

msxml6

DllSetProperty

netapi32

I_NetGetForestTrustInformation
NetApiBufferSize
NetServerTransportAddEx

netshell

HrCreateDesktopIcon
HrRenameConnection

ntdll

memcpy
strlen

ole32

IsRoInitializeASTAAllowedInDesktop
OleSavePictureFileExt

propsys

PSGetPropertyDescriptionByName

rasdlg

RouterEntryDlgA
RouterEntryDlgW

rpcrt4

NdrGetTypeFlags

secur32

QuerySecurityPackageInfoW
SspiGetTargetHostName

setupapi

CM_Find_Range
pSetupDiGetStrongNameForDriverNode
pSetupWriteLogEntry

shell32

ILRemoveLastID

userenv

DeleteProfileA

uxtheme

HitTestThemeBackground
OpenThemeDataEx

ws2_32

WSAEnumNetworkEvents
WSAIoctl
WSApSetPostRoutine

wtsapi32

WTSCreateListenerW
WTSGetChildSessionId
WTSGetListenerSecurityW
WTSQueryListenerConfigW
WTSSetUserConfigA
WTSVirtualChannelOpen

cr

FuckDeWinDef

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 180B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de6b23a41102183991cc6dfa96c4d7e3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

advapi32

comctl32

compstui

cryptui

dinput8

dwmapi

gdi32

ieframe

mmcndmgr

msftedit

mshtml

msxml6

netapi32

netshell

ntdll

ole32

propsys

rasdlg

rpcrt4

secur32

setupapi

shell32

userenv

uxtheme

ws2_32

wtsapi32

cr

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 44B

.rdata Size: 2KB - Virtual size: 1KB

.eh_fram Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 180B

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 48B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 708B

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 44B

.rdata
Size: 2KB - Virtual size: 1KB

.eh_fram
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 180B

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 48B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 708B