Static task
static1
Behavioral task
behavioral1
Sample
Chainski-Crypter.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
Chainski-Crypter.exe
Resource
win10v2004-20240611-en
General
-
Target
Chainski-Crypter.exe
-
Size
899KB
-
MD5
1fd56f231b4ebde1177075330fdb8492
-
SHA1
bf77b5bc416bd1c9945da37c1fc6f297cc6beb6b
-
SHA256
0509962b6852fc7d9be4c163a537c8f98797e25ed5d9e191bd80f15ebfe80488
-
SHA512
46229a4b40d23a8e7ea0384211e208322b5531851ee7c39c8d3cefa034c1ca4d1cd1239872b7e9641b85126938ef64691908489feacecf7c496fbfe18318a6df
-
SSDEEP
6144:i7LYD/74VKOOk2CGkev5LkNtKOOk2CGkev5LkNtKOOk2CGkev5LkN+gOO4jCGEep:ivYD/78ed4ed4ed8e/B
Malware Config
Signatures
Files
-
Chainski-Crypter.exe.exe windows:4 windows x64 arch:x64
Code Sign
6d:2c:64:40:e5:f4:f6:bc:49:06:a4:af:6c:06:75:a0Certificate
IssuerCN=Chainski Tools Root CANot Before13/08/2022, 05:00Not After20/08/2032, 05:00SubjectCN=Chainski Tools Root CA90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before11/05/2022, 00:00Not After10/08/2033, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 682KB - Virtual size: 682KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 210KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ