Chrome[.]exe | Triage

Resubmissions

06/01/2024, 13:56

240106-q84vjsbag6 8

06/01/2024, 13:51

240106-q5w1jaahh6 8

Sharing

Copy URL

Twitter E-mail

General

Target

Chrome.exe
Size

25KB
MD5

36e5a13439d34c31713951031845897f
SHA1

ca05fb13282aca98f89dcbe064b879ce448f3168
SHA256

83340fa8f40542d38ebe30a00c1f6826b0aec8a7ceef0120638f3b4197817344
SHA512

23725fcd4ee1cc9a5c4d05b4a086915e84f7ed59634ebd2272a921ccf64cf9191429a2c4fc1046893d7731b5a2c9a4a159a9740e4e8ff69a3260f81e57c56ef4
SSDEEP

384:6JuRC3VCE3Vug74lC+PQdfrstXXwrXY3KR3Uns1Cb:6D3IXl/kbY3s3U0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Chrome.exe

Files

Chrome.exe
.exe windows:6 windows x64 arch:x64

35f70b5a5dece1a5f7a75b811d26b3f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

urlmon

URLDownloadToFileW

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException
__current_exception
__std_exception_copy
__std_exception_destroy
__current_exception_context
__C_specific_handler
memset
memcpy

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_crt_atexit
_c_exit
terminate
_cexit
__p___argv
exit
_initialize_onexit_table
__p___argc
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_initterm_e
_set_app_type
_seh_filter_exe
_exit
_invalid_parameter_noinfo_noreturn
system
_register_thread_local_exe_atexit_callback

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free
_set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

IsDebuggerPresent
RtlLookupFunctionEntry
RtlVirtualUnwind
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
RtlCaptureContext
InitializeSListHead

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

35f70b5a5dece1a5f7a75b811d26b3f7

Headers

DLL Characteristics

File Characteristics

Imports

msvcp140

urlmon

vcruntime140_1

vcruntime140

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

kernel32

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 552B

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 88B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 552B

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 88B