C:\Users\pro10\source\repos\PC shaking\Release\PC shaking.pdb
Static task
static1
General
-
Target
Chimichi.exe
-
Size
227KB
-
MD5
a0463679238586a9fa0e9f1acdb7892b
-
SHA1
999d00a1f2f13260fb417437d9c8b3c0f242ebc9
-
SHA256
4a43caa8f8f5ec6e3ae1ddf39ea091d4e265a6cf6de0362d7f91271ab8b3ce42
-
SHA512
79361f73bb0cad27e49bdc63368e760476bfb96c96e84e4e05419ec6830a234df64fc4227c1293b4eebaac1d7fdc1850bca005e686433910cdb7fd0b998fa5c1
-
SSDEEP
6144:fO7ofVXBvnrATDg/kRD/PakD/kI7IHXkj/vRfi:7YL5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Chimichi.exe
Files
-
Chimichi.exe.exe windows:6 windows x86 arch:x86
71429a9d65181cdc0c50b276b196c774
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
Sleep
TerminateThread
CreateThread
Beep
GetConsoleWindow
GetTickCount
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
VirtualAlloc
user32
GetWindowRect
GetDC
SetWindowPos
MessageBoxW
EnumChildWindows
GetIconInfo
GetSystemMetrics
SetWindowTextW
GetShellWindow
DrawIcon
ShowWindow
GetCursorInfo
RedrawWindow
GetWindowDC
GetForegroundWindow
LoadIconW
FindWindowW
GetCursorPos
GetDesktopWindow
SystemParametersInfoW
SetProcessDPIAware
CreateIconIndirect
ReleaseDC
SetCursorPos
InvalidateRect
LoadImageW
SetSystemCursor
gdi32
BitBlt
PlgBlt
CreateHatchBrush
GetBitmapBits
GetDeviceCaps
CreateRectRgn
DeleteDC
TextOutW
SetTextColor
SetBitmapBits
SetBkMode
LineTo
CreatePen
Rectangle
SelectClipRgn
SetBkColor
Ellipse
SetStretchBltMode
DeleteObject
InvertRgn
CreateSolidBrush
CreateEllipticRgn
CreateBitmap
RoundRect
PatBlt
SetPixel
CreateCompatibleDC
CreateDIBSection
SelectObject
CreateCompatibleBitmap
StretchBlt
msvcp140
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
winmm
waveOutWrite
waveOutOpen
waveOutPrepareHeader
waveOutClose
waveOutUnprepareHeader
PlaySoundA
vcruntime140
__current_exception_context
__current_exception
_except_handler4_common
memset
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
exit
system
_seh_filter_exe
_initialize_onexit_table
_set_app_type
_configure_narrow_argv
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_initialize_narrow_environment
_exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
api-ms-win-crt-time-l1-1-0
clock
_time64
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-math-l1-1-0
_libm_sse2_tan_precise
__setusermatherr
_libm_sse2_sin_precise
_libm_sse2_cos_precise
_CIfmod
roundf
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ