chakrathunk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Chakrathunk.dll
Resource
win10v2004-20240426-en
General
-
Target
Chakrathunk.dll
-
Size
118KB
-
MD5
bcd1d28cea891a624616ae0ff40fb406
-
SHA1
381a38b5a82b40ec6ba158d95424ef59e7d4e6e7
-
SHA256
abe91f09c22b91cee95af815260ee57c4b92dcadd12c84bd575cfa7f4274fb33
-
SHA512
3695e58540713903caa95579b31a0f21f59b82734c864423d916527d845a0f0a0ebf6c79471a6fccec6700ee0a79172f1089a7657f791f32d324bc9cc70e01ff
-
SSDEEP
1536:p6kRB3+Il/UhzAh+TbwmzXG/H3fvZw1k1OzqdWc:4kR/szBTbda3ZwigGdWc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Chakrathunk.dll
Files
-
Chakrathunk.dll.dll windows:10 windows x86 arch:x86
93bd4bb9e2d785e8a509747be9fc79c0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_onexit
_except_handler4_common
_unlock
_lock
__dllonexit
??1type_info@@UAE@XZ
_initterm
_amsg_exit
_XcptFilter
_callnewh
malloc
free
__CxxFrameHandler3
_CxxThrowException
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@XZ
memmove_s
memcpy_s
api-ms-win-core-file-l1-2-1
CreateFileW
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-errorhandling-l1-1-1
SetUnhandledExceptionFilter
SetLastError
UnhandledExceptionFilter
api-ms-win-core-heap-l1-2-0
GetProcessHeap
HeapFree
HeapAlloc
api-ms-win-core-synch-l1-2-0
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
ReleaseSRWLockShared
Sleep
api-ms-win-core-memory-l1-1-2
MapViewOfFile
VirtualProtect
CreateFileMappingW
UnmapViewOfFile
api-ms-win-core-libraryloader-l1-2-0
GetModuleFileNameW
GetModuleHandleExW
DisableThreadLibraryCalls
api-ms-win-core-debug-l1-1-1
OutputDebugStringA
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-processthreads-l1-1-2
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
api-ms-win-core-sysinfo-l1-2-1
GetSystemTimeAsFileTime
GetTickCount
ntdll
DbgPrintEx
NtAreMappedFilesTheSame
Exports
Exports
JsThunk_AllocateData
JsThunk_Cleanup
JsThunk_CleanupDefer
JsThunk_CleanupFinish
JsThunk_DataToCode
JsThunk_GetSize
JsThunk_InitData
JsThunk_Is
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ