Static task
static1
General
-
Target
Chicory.exe
-
Size
78.2MB
-
MD5
3aa374d1fa1cc08fe72921a4e695506c
-
SHA1
6d45e17d8d202e721397c7d2bde2b807dd0149b3
-
SHA256
5f942ee3b216494ab518c7d1589ae8e9661162c67839b91fb48b153b386387fd
-
SHA512
5f0d70daee9b3d84c793db0fcbb22bf025eba59a11d7529b28bdc6fd4af8b7103cf291e1ddd4573312c7bec791d573b06e57530cbfe4f0687edfc763243f0732
-
SSDEEP
1572864:ubkjd+cRPXzmz9LmGwjqWnevgQWJt0gEa2h1AkRS1wqJjXqOowEoFsMd:ubkjd+cRPXzmz9LmGwNUgmgEa2h1AkR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Chicory.exe
Files
-
Chicory.exe.exe windows:6 windows x86 arch:x86
4b6039d8a61882833516abff1400c75c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCanonicalizeUrlA
InternetCloseHandle
InternetConnectA
InternetReadFile
HttpOpenRequestA
HttpSendRequestA
InternetOpenA
HttpQueryInfoA
InternetGetConnectedState
InternetCrackUrlA
d3d11
D3D11CreateDevice
dbghelp
MiniDumpWriteDump
winmm
joyGetPosEx
joyGetPos
mciSendStringA
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
ws2_32
socket
setsockopt
sendto
select
recvfrom
recv
ntohs
WSAGetLastError
inet_ntoa
inet_addr
getsockopt
ioctlsocket
connect
closesocket
bind
accept
htons
send
WSAStartup
getaddrinfo
freeaddrinfo
getpeername
__WSAFDIsSet
listen
htonl
gdiplus
GdiplusStartup
GdiplusShutdown
comctl32
InitCommonControlsEx
kernel32
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
WriteConsoleW
HeapSize
SetEndOfFile
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
ReadConsoleW
GetTimeZoneInformation
HeapReAlloc
DecodePointer
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
OutputDebugStringA
GetCurrentProcess
GetCommandLineW
ExpandEnvironmentStringsW
CreateDirectoryW
CreateFileW
GetFinalPathNameByHandleW
GetFullPathNameW
CloseHandle
SetUnhandledExceptionFilter
GetLastError
SetErrorMode
Sleep
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleW
MoveFileA
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentVariableW
GetCurrentDirectoryW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
GetProcAddress
LoadLibraryW
SetLastError
CreateThread
GetExitCodeThread
LocalFree
FormatMessageW
GetVersionExW
GetLocaleInfoW
GetUserDefaultLCID
GetConsoleWindow
SetCurrentDirectoryA
GetCurrentDirectoryA
FreeLibrary
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
SetWaitableTimer
CreateWaitableTimerW
GetTickCount64
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetThreadPriority
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalAlloc
GlobalUnlock
GlobalLock
ExitProcess
lstrlenA
WaitForSingleObjectEx
CreateEventExW
SetEvent
ResetEvent
CreateEventW
IsProcessorFeaturePresent
UnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
HeapAlloc
HeapFree
GetProcessHeap
LoadLibraryExW
EncodePointer
GetModuleHandleExW
FindFirstFileExW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileAttributesExW
SetFileAttributesW
MoveFileExW
ReadFile
HeapValidate
HeapWalk
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
GetStdHandle
WriteFile
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
RtlUnwind
user32
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
GetFocus
MoveWindow
SetWindowTextW
ClientToScreen
MapWindowPoints
CreateDialogParamW
DialogBoxParamW
EndDialog
GetDlgItem
SetDlgItemTextW
GetDlgItemTextW
DrawTextW
ScreenToClient
SetClipboardData
keybd_event
SetDlgItemTextA
LoadImageW
GetRawInputDeviceList
SetForegroundWindow
ReleaseCapture
SetCapture
GetKeyState
BringWindowToTop
DestroyWindow
SetCursor
RegisterClassExW
DefWindowProcW
ReleaseDC
GetDC
GetMonitorInfoW
CloseClipboard
GetAsyncKeyState
OpenClipboard
MonitorFromWindow
EnumDisplaySettingsW
SetWindowLongW
GetCursorPos
SetCursorPos
AdjustWindowRectEx
GetWindowRect
LoadCursorW
GetRawInputDeviceInfoA
UpdateWindow
GetSystemMetrics
SetWindowPos
ShowWindow
SendMessageW
GetActiveWindow
MessageBoxW
SetProcessDPIAware
IsDialogMessageW
SetFocus
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
wsprintfW
MessageBoxA
CreateWindowExW
GetClientRect
gdi32
GetStockObject
GetDeviceCaps
SelectObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
SHGetFolderPathW
ShellExecuteW
ole32
CoCreateInstance
CoTaskMemFree
CoInitialize
CoCreateFreeThreadedMarshaler
dxgi
CreateDXGIFactory1
rpcrt4
UuidCreate
UuidToStringW
winhttp
WinHttpCloseHandle
WinHttpSetStatusCallback
WinHttpWebSocketReceive
WinHttpWebSocketSend
WinHttpWebSocketCompleteUpgrade
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpOpenRequest
WinHttpOpen
WinHttpConnect
WinHttpSetOption
dwmapi
DwmGetCompositionTimingInfo
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Sections
.text Size: 69.6MB - Virtual size: 69.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.0MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mydata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2.5MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ