bbccddd9586ac67bb84a1a08cf747c18fbcb500e4345cb3c53746433672db251

Sharing

Copy URL Twitter E-mail

General

Target
bbccddd9586ac67bb84a1a08cf747c18fbcb500e4345cb3c53746433672db251
Size 962KB
Sample240609-jpeb8age84
SHA256 bbccddd9586ac67bb84a1a08cf747c18fbcb500e4345cb3c53746433672db251
MD5 ad38c0cecfaabd1879e8335b2743c2b0
SHA1 39c29bceeae0cbfff682f99a31a4713e93fc90aa
SHA512 cd9dfccbc81ec9ebd33e4ec87fc2cf6da5a27102be98e15ffc9c0b4c319020e51d6a03d0e799f9e04e31be3c549ee4f927987afb10f0165aac246bbb8eeec7d4
SSDEEP 24576:frniuLOyClDowWzTzznFrYwLoPXEam+cXGBQqzIZepnLwJ:7PLORJIZ+wJ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

bbccddd9586ac67bb84a1a08cf747c18fbcb500e4345cb3c53746433672db251

.exe 962KB

bbccddd9586ac67bb84a1a08cf747c18fbcb500e4345cb3c53746433672db251

IMPHASH 7df544456b05d3a96178c615f96bb895
SHA256 bbccddd9586ac67bb84a1a08cf747c18fbcb500e4345cb3c53746433672db251
MD5 ad38c0cecfaabd1879e8335b2743c2b0
SHA1 39c29bceeae0cbfff682f99a31a4713e93fc90aa
SHA512 cd9dfccbc81ec9ebd33e4ec87fc2cf6da5a27102be98e15ffc9c0b4c319020e51d6a03d0e799f9e04e31be3c549ee4f927987afb10f0165aac246bbb8eeec7d4
SSDEEP 24576:frniuLOyClDowWzTzznFrYwLoPXEam+cXGBQqzIZepnLwJ:7PLORJIZ+wJ
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

91:67:47:81:55:31:2e:76:f1:c5:96:cc:c7:91:8d:f0:b6:ff:f5:98

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Web Discover,O=Web Discover,L=Wilmington,ST=Delaware,C=US

Chains

Jun 7, 2024

Minor OS version

Major OS version

Entry point

309018

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\src\out\Release\initialexe\chrome.exe.pdb

chrome_elf

SignalChromeElf

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

winmm

timeGetTime

advapi32

RegOpenKeyExW GetUserNameW GetSecurityInfo SetEntriesInAclW SetThreadToken LookupPrivilegeValueW EqualSid DuplicateTokenEx DuplicateToken CreateRestrictedToken CreateWellKnownSid CopySid RegDisablePredefinedCache RevertToSelf ConvertStringSecurityDescriptorToSecurityDescriptorW ConvertStringSidToSidW SetSecurityInfo SetTokenInformation SetKernelObjectSecurity GetSecurityDescriptorSacl GetLengthSid GetKernelObjectSecurity GetAce SystemFunction036 ConvertSidToStringSidW RegSetValueExW RegCloseKey RegCreateKeyExW RegEnumKeyExW RegQueryInfoKeyW RegQueryValueExW CreateProcessAsUserW OpenProcessToken GetTokenInformation

user32

CloseWindowStation CloseDesktop CreateDesktopW GetThreadDesktop CreateWindowStationW SetProcessWindowStation GetProcessWindowStation GetUserObjectInformationW MessageBoxW wsprintfW FindWindowExW CharUpperW GetWindowThreadProcessId AllowSetForegroundWindow IsWindow SendMessageTimeoutW

kernel32

EnumSystemLocalesW GetEnvironmentStringsW FreeEnvironmentStringsW GetTimeZoneInformation WriteConsoleW IsValidCodePage GetACP GetOEMCP ReadConsoleW OutputDebugStringW GetDriveTypeW SetEnvironmentVariableA RtlCaptureContext ReleaseSemaphore SetNamedPipeHandleState TransactNamedPipe GetUserDefaultLCID IsValidLocale LCMapStringW CreateSemaphoreW GetStartupInfoW UnhandledExceptionFilter GetCPInfo RtlUnwind ExitProcess GetFullPathNameW SetStdHandle GetConsoleMode GetConsoleCP IsProcessorFeaturePresent EncodePointer GetStringTypeW MultiByteToWideChar WideCharToMultiByte LoadLibraryExA FormatMessageW VirtualProtect CreateRemoteThread GetComputerNameExW lstrlenW DebugBreak SuspendThread ReadProcessMemory SearchPathW CreateNamedPipeW CreateJobObjectW VirtualFreeEx CreateMutexW SignalObjectAndWait GetProcessHandleCount ProcessIdToSessionId GetFileType GetThreadContext TerminateJobObject InitializeCriticalSection GetHandleInformation HeapSetInformation GetModuleHandleA GetProcAddress GetLastError SetLastError CreateEventW GetCurrentThreadId WaitForMultipleObjects WaitForSingleObject GetProcessId GetCommandLineW SetCurrentDirectoryW LoadLibraryExW DecodePointer RaiseException HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap InitializeCriticalSectionAndSpinCount DeleteCriticalSection OpenProcess GetCurrentProcessId GetModuleHandleW DuplicateHandle GetCurrentProcess GetExitCodeProcess CompareStringW GetModuleFileNameW LoadResource LockResource SizeofResource FindResourceW SetErrorMode GetSystemInfo VirtualAlloc VirtualFree CreateFileW WriteFile OutputDebugStringA CloseHandle GetTickCount FormatMessageA QueryPerformanceCounter QueryPerformanceFrequency Sleep GetCurrentThread SetThreadPriority GetThreadPriority GetSystemTimeAsFileTime WaitNamedPipeW LocalFree GetVersionExW GetNativeSystemInfo TerminateProcess GetEnvironmentVariableW SetEnvironmentVariableW GetUserDefaultLangID ExpandEnvironmentStringsW GetStdHandle ReadFile SetHandleInformation ResumeThread CreateProcessW AssignProcessToJobObject SetInformationJobObject IsDebuggerPresent CreateThread GetCurrentDirectoryW CreateDirectoryW GetFileAttributesW GetLongPathNameW QueryDosDeviceW GetTempPathW CreateFileMappingW MapViewOfFile UnmapViewOfFile GetProcessTimes FlushFileBuffers SetFilePointerEx GetLocaleInfoW GetUserDefaultUILanguage RtlCaptureStackBackTrace SetUnhandledExceptionFilter EnterCriticalSection LeaveCriticalSection GetSystemDirectoryW GetWindowsDirectoryW UnregisterWaitEx RegisterWaitForSingleObject GetModuleHandleExW TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryW FreeLibrary CreateIoCompletionPort GetQueuedCompletionStatus PostQueuedCompletionStatus SetEvent ResetEvent VirtualQueryEx VirtualAllocEx VirtualProtectEx WriteProcessMemory

userenv

GetProfileType

wtsapi32

WTSFreeMemory WTSQuerySessionInformationW

Name

.text

Size

410KB

Virtual Size

409KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

134KB

Virtual Size

133KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

389KB

Virtual Size

388KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=2, id=225, version=20806,

count=3, id=199, version=41118,

count=41, id=223, productName=VS2013 build 21005, version=21005,

count=240, id=224, productName=VS2013 build 21005, version=21005,

count=78, id=225, productName=VS2013 build 21005, version=21005,

count=2, id=208, version=65501,

count=24, id=203, version=65501,

count=1, productName=Unmarked objects (old),

count=3, id=221, productName=VS2013 UPD4 build 31101, version=31101,

count=364, id=1, productName=Unmarked objects,

count=3, id=224, productName=VS2013 UPD4 build 31101, version=31101,

count=285, id=225, productName=VS2013 UPD4 build 31101, version=31101,

count=1, id=220, productName=VS2013 UPD4 build 31101, version=31101,

count=1, id=219, productName=VS2013 build 21005, version=21005,

count=2, id=151,

count=1, id=222, productName=VS2013 UPD4 build 31101, version=31101,