Behavioral task
behavioral1
Sample
Chlorine.exe
Resource
win7-20231129-en
General
-
Target
Chlorine 1.0.zip
-
Size
1.6MB
-
MD5
f4ac9d28631a30ef50f6bca3d3b7cab1
-
SHA1
7a07ac4f0ad311c8eac484fa963e0c6f53aededb
-
SHA256
c4f5bc5c881eee90ced6f673271e054454dd9ede74eb8162b7ccee91af53778a
-
SHA512
c3bfa4c759a1bbd8b0b619fd69ce291b020ef427c94c09531909abeec2250bc584f2fadee4daf9113755ff0d86fd55f8575c02604553cf265dc3fbfd78ee4f0f
-
SSDEEP
49152:hIpp767RoiIxqqHKSIThS57NlBs/WtqLPhXUvnV0XXx:h6+TIMK7c6NPs+tqLPhXUvnWXXx
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Chlorine.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Chlorine.exe
Files
-
Chlorine 1.0.zip.zip
-
Chlorine.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 512KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 454KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
readme.txt