Chakradiag[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Chakradiag.dll
Size

805KB
MD5

2c5a3c26b521587f42c5ddcadb8def7d
SHA1

2a56afc24a313bf94bfbceb7d47fa1a616c334ea
SHA256

8af0cb9b710d4faafc497647ce30f54566ad489ff993eb4cdde1c02a41ca792c
SHA512

595aaf4d7fe3e792b30a819daa1c5fd9b490f43312e8979ac246b1b07b8050403d2e262569eb88e5977c7a2047f32e6236f6a407ed89b10d2ce6850b2302a480
SSDEEP

6144:fZ2Dt5qAfG7q2U4WFKgAa+UCY66GTcCUn0vB6QXU8maEYUW0uABoo7ImznPZx:C5GXUG36GlnE8mTYUP31ImznP/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Chakradiag.dll

Files

Chakradiag.dll
.dll regsvr32 windows:10 windows x86 arch:x86

2a813e19c1eb41997c4535e5d5a74913

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ChakraDiag.pdb

Imports

msvcrt

malloc
wcsncpy_s
??_V@YAXPAX@Z
wcscat_s
memmove
iswspace
wcsnlen
??3@YAXPAX@Z
??0exception@@QAE@ABV0@@Z
swprintf_s
??1exception@@UAE@XZ
_ltow_s
wcschr
wcscpy_s
wcsrchr
wcspbrk
??0exception@@QAE@XZ
??1type_info@@UAE@XZ
_lock
_unlock
__dllonexit
_onexit
_ui64tow_s
?terminate@@YAXXZ
calloc
_errno
realloc
_XcptFilter
_vscwprintf
memset
_callnewh
_purecall
qsort_s
?what@exception@@UBEPBDXZ
_amsg_exit
_except_handler4_common
free
vswprintf_s
memmove_s
memcpy_s
_initterm
_CIfmod
_CIlog
_CxxThrowException
__CxxFrameHandler3
_ftol2_sse
ceil
floor
memcpy

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExA
LoadLibraryExW
SizeofResource
LockResource
LoadResource
FindResourceExW
FreeLibrary
GetModuleHandleW
GetModuleFileNameW
GetProcAddress

oleaut32

LoadTypeLi
SysFreeString
SysStringLen
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
VarUI4FromStr
UnRegisterTypeLi
RegisterTypeLi
SysAllocString

api-ms-win-core-timezone-l1-1-0

SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
GetTimeZoneInformationForYear
GetTimeZoneInformation

api-ms-win-core-errorhandling-l1-1-1

SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
GetLastError

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

api-ms-win-core-synch-l1-2-0

Sleep
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection

api-ms-win-core-com-l1-1-1

StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc

api-ms-win-core-registry-l1-1-0

RegEnumKeyExW
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey

api-ms-win-core-string-l2-1-0

CharNextW

api-ms-win-core-localization-l1-2-1

SetThreadLocale
GetThreadLocale

api-ms-win-core-processthreads-l1-1-2

GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
TerminateProcess

api-ms-win-core-debug-l1-1-1

OutputDebugStringA

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-2-1

GetLogicalProcessorInformation
GetSystemTimeAsFileTime
GetTickCount
VerSetConditionMask
GetSystemInfo

api-ms-win-core-heap-l1-2-0

HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
HeapSize
HeapDestroy

api-ms-win-core-processenvironment-l1-2-0

GetEnvironmentVariableW

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrCmpLogicalW

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW

api-ms-win-core-delayload-l1-1-1

DelayLoadFailureHook

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FreeDumpStreams
GetDumpStreams

Sections

.text
Size: 754KB - Virtual size: 754KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a813e19c1eb41997c4535e5d5a74913

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

api-ms-win-core-libraryloader-l1-2-0

oleaut32

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-string-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-com-l1-1-1

api-ms-win-core-registry-l1-1-0

api-ms-win-core-string-l2-1-0

api-ms-win-core-localization-l1-2-1

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-debug-l1-1-1

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-heap-l1-2-0

api-ms-win-core-processenvironment-l1-2-0

api-ms-win-core-shlwapi-obsolete-l1-1-0

api-ms-win-core-string-obsolete-l1-1-0

api-ms-win-core-delayload-l1-1-1

api-ms-win-core-kernel32-legacy-l1-1-1

Exports

Exports

Sections

.text Size: 754KB - Virtual size: 754KB

.data Size: 512B - Virtual size: 2KB

.idata Size: 4KB - Virtual size: 4KB

.didat Size: 512B - Virtual size: 8B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 42KB - Virtual size: 42KB

.text
Size: 754KB - Virtual size: 754KB

.data
Size: 512B - Virtual size: 2KB

.idata
Size: 4KB - Virtual size: 4KB

.didat
Size: 512B - Virtual size: 8B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 42KB - Virtual size: 42KB