Locker Chydnoy(Dark)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Locker Chydnoy(Dark).exe
Size

183KB
MD5

859527bd99e1f04185b9e2bd380b87cb
SHA1

d19f79069f0e0d83153fc89c347d55cd0225272b
SHA256

67825368fc1e0a6bc99267a2dd37c2fd79a7ef2a0b4206ac6e86e14a5f7e771b
SHA512

fcb78c0a3153fca2bb3abca1e77bdaf393aeebbf64d9e7d3947b86b14ccda49782e9044cb030c80fd6cdaafd6e846c1b988de24e410c9b72c694af111adaed9f
SSDEEP

3072:Kery4qBSqC9PbG4ZeHl921pn9nMrnZOheHLwa431rRmmqbk6Bus5Bf:frTbG4ZeHl921wwherbgqbF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Locker Chydnoy(Dark).exe

Files

Locker Chydnoy(Dark).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ