chakrathunk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Chakrathunk.dll
Resource
win10v2004-20240508-en
General
-
Target
Chakrathunk.dll
-
Size
118KB
-
MD5
ed272eb137be765adf63a64c75fdc4b7
-
SHA1
7e366d9d66e84112f9ca3ebb3bd284f6803bc9c5
-
SHA256
6d8d3dcb9ed3ffe45ea42dd0f887ee180dbfc962a17176bf95e5bc939bc87df7
-
SHA512
40667adad006b1f6ad9f3823ce69f8b24c1d5763dcd638789c26c3ec7ddce39f408bdfae9ff96b8ce3e568ae09e25e2865e80e06a071da5d4b7e696fbc04d111
-
SSDEEP
1536:WkdB3+Il/UhzAh+TbwmzXG/HJfvZw1k1OzqcHc:Wkd/szBTbdaJZwigGcHc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Chakrathunk.dll
Files
-
Chakrathunk.dll.dll windows:10 windows x86 arch:x86
93bd4bb9e2d785e8a509747be9fc79c0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_onexit
_except_handler4_common
_unlock
_lock
__dllonexit
??1type_info@@UAE@XZ
_initterm
_amsg_exit
_XcptFilter
_callnewh
malloc
free
__CxxFrameHandler3
_CxxThrowException
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@XZ
memmove_s
memcpy_s
api-ms-win-core-file-l1-2-1
CreateFileW
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-errorhandling-l1-1-1
SetUnhandledExceptionFilter
SetLastError
UnhandledExceptionFilter
api-ms-win-core-heap-l1-2-0
GetProcessHeap
HeapFree
HeapAlloc
api-ms-win-core-synch-l1-2-0
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
ReleaseSRWLockShared
Sleep
api-ms-win-core-memory-l1-1-2
MapViewOfFile
VirtualProtect
CreateFileMappingW
UnmapViewOfFile
api-ms-win-core-libraryloader-l1-2-0
GetModuleFileNameW
GetModuleHandleExW
DisableThreadLibraryCalls
api-ms-win-core-debug-l1-1-1
OutputDebugStringA
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-processthreads-l1-1-2
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
api-ms-win-core-sysinfo-l1-2-1
GetSystemTimeAsFileTime
GetTickCount
ntdll
DbgPrintEx
NtAreMappedFilesTheSame
Exports
Exports
JsThunk_AllocateData
JsThunk_Cleanup
JsThunk_CleanupDefer
JsThunk_CleanupFinish
JsThunk_DataToCode
JsThunk_GetSize
JsThunk_InitData
JsThunk_Is
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ