c_s_2_chet[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c_s_2_chet.exe
Size

12.4MB
MD5

47cc1159785ac53dc5c4f8e6258fcf6b
SHA1

9546b749e7d7fde748b654326083e8dce1529682
SHA256

d4676b8a6aa96ad816d2d369915f316fa5aab465add37a36049a463e8b0196e8
SHA512

9d83f1b5c7e0026e7bef4b07f50c6447fc7b99ebcef875817a2e9382bbc269eb2d211e7a5a9c5e9557fe50c2b6054545965288b9806e4695da096620fb862e9d
SSDEEP

196608:r5HqKJ9Fxlb8Ul8etlaW48KBllMJuEcA3/xbnjX+TqXi6wTPSf9r:rQUKolaOKnl2uEcuJbnjOTqy6wbSfF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c_s_2_chet.exe

Files

c_s_2_chet.exe
.exe windows:1 windows x86 arch:x86

140094f13383e9ae168c4b35b6af3356

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetComputerNameA
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
SetErrorMode
Sleep
VirtualAllocExNuma

shlwapi

PathFindFileNameA

msvcrt

malloc
free
memset
strcmp
_strcmpi
strcpy

Sections

.text
Size: 12.3MB - Virtual size: 12.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ