Static task
static1
General
-
Target
Chrome.exe
-
Size
13.5MB
-
MD5
6cc982f11c1e4497494ea65daf8b5a57
-
SHA1
1e6e935f2271f5b85841f7ce0acff6274b80d163
-
SHA256
fc318fc018f3203a2aa7237a89ae77591dcc0e3d3ec56031f541202fb18750a8
-
SHA512
035e9af8c2349caa12a261f1235f8fe0c181f1216de0d3048434ba64201916fda3ca675b1e94488c8633e7f467efcbbb66f59b063b09e3ab4425fe595f455e6e
-
SSDEEP
393216:hXVbESu+2bJQOgWEgcRrRYZ30vvBOLADJ:hlbhFBOzETvekv4K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Chrome.exe
Files
-
Chrome.exe.exe windows:6 windows x64 arch:x64
e9fc4758090dfd6f57ffcd81ec45bc1c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
bcryptprimitives
ProcessPrng
api-ms-win-core-synch-l1-2-0
WakeByAddressAll
user32
GetWindowPlacement
comctl32
SetWindowSubclass
kernel32
GetSystemTimeAsFileTime
gdi32
CreateRectRgn
dwmapi
DwmEnableBlurBehindWindow
ole32
CoUninitialize
shell32
ShellExecuteW
oleaut32
SysStringByteLen
uxtheme
SetWindowTheme
advapi32
SystemFunction036
ntdll
NtCancelIoFileEx
bcrypt
BCryptGenRandom
api-ms-win-crt-math-l1-1-0
round
api-ms-win-crt-string-l1-1-0
wcsncmp
api-ms-win-crt-convert-l1-1-0
wcstol
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
api-ms-win-crt-stdio-l1-1-0
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Sections
.text Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.e>, Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zL6 Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.z~S Size: 13.4MB - Virtual size: 13.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ