Chakrathunk[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Chakrathunk.dll
Size

118KB
MD5

5750d828d956b7b0247c291540746497
SHA1

8301fd4b389248e6de39795f19e29c75418aab42
SHA256

3f14b3691d94226a16760bad0b6b31a435f7a9722042cf80daaa7c527f10c4a6
SHA512

5e75c7b2efe7f9561410c8d9e81caa033063e17bef3151b803cf21077c916e41a4e3293e492fcb251c3513affbda09cdcc0d4e3b991b0a807afeda92876cfe78
SSDEEP

1536:ckr5H+wl/0hzAh+TbwmzXG/TJRTL1k1OzqxeE:ckrfszBTbdmPigGxeE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Chakrathunk.dll

Files

Chakrathunk.dll
.dll windows:10 windows x86 arch:x86

93bd4bb9e2d785e8a509747be9fc79c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

chakrathunk.pdb

Imports

msvcrt

_onexit
_except_handler4_common
_unlock
_lock
__dllonexit
??1type_info@@UAE@XZ
_initterm
_amsg_exit
_XcptFilter
_callnewh
malloc
free
__CxxFrameHandler3
_CxxThrowException
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@XZ
memmove_s
memcpy_s

api-ms-win-core-file-l1-2-1

CreateFileW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-errorhandling-l1-1-1

SetUnhandledExceptionFilter
SetLastError
UnhandledExceptionFilter

api-ms-win-core-heap-l1-2-0

GetProcessHeap
HeapFree
HeapAlloc

api-ms-win-core-synch-l1-2-0

AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
ReleaseSRWLockShared
Sleep

api-ms-win-core-memory-l1-1-2

MapViewOfFile
VirtualProtect
CreateFileMappingW
UnmapViewOfFile

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameW
GetModuleHandleExW
DisableThreadLibraryCalls

api-ms-win-core-debug-l1-1-1

OutputDebugStringA

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-2

GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
TerminateProcess

api-ms-win-core-sysinfo-l1-2-1

GetSystemTimeAsFileTime
GetTickCount

ntdll

DbgPrintEx
NtAreMappedFilesTheSame

Exports

Exports

JsThunk_AllocateData
JsThunk_Cleanup
JsThunk_CleanupDefer
JsThunk_CleanupFinish
JsThunk_DataToCode
JsThunk_GetSize
JsThunk_InitData
JsThunk_Is

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93bd4bb9e2d785e8a509747be9fc79c0

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

api-ms-win-core-file-l1-2-1

api-ms-win-core-handle-l1-1-0

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-heap-l1-2-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-memory-l1-1-2

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-debug-l1-1-1

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-sysinfo-l1-2-1

ntdll

Exports

Exports

Sections

.text Size: 99KB - Virtual size: 99KB

.data Size: 8KB - Virtual size: 9KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 99KB - Virtual size: 99KB

.data
Size: 8KB - Virtual size: 9KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB