Static task
static1
Behavioral task
behavioral1
Sample
Google Chrome.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Google Chrome.exe
Resource
win10v2004-20240709-en
General
-
Target
Google Chrome.exe
-
Size
35.5MB
-
MD5
8369fc21b023723c7341a39e95dc462a
-
SHA1
ecf5497f0b644c5ffebd5f116ace0edf00ffa294
-
SHA256
0f46743bda9ca4ac254a7bb29487cbdb9c712b4a6893ac95ef4b271c64f5bc5d
-
SHA512
3269e4aacf1cf500691559422c781d8e63095682c22fb02b933751bc668d320038c92cfb2c617f3abe7e98bfe9c4d0431851f7037439dfac7bb0c8ad0fe3c36c
-
SSDEEP
786432:Sm0KFah04MeD5J96c3FsLUi/TcCv8fF3mC:Sm0mah04MeFJ96CFsLU6f8Vm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Google Chrome.exe
Files
-
Google Chrome.exe.exe windows:6 windows x64 arch:x64
de9a96e6ef16029c526c8cdc3fbd81fe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
d3d9
Direct3DCreate9
kernel32
FindClose
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
DefWindowProcW
gdi32
CreateRoundRectRgn
advapi32
RegSetValueExW
shell32
ShellExecuteW
msvcp140
?good@ios_base@std@@QEBA_NXZ
imm32
ImmSetCompositionWindow
dwmapi
DwmExtendFrameIntoClientArea
d3dx9_43
D3DXCreateTextureFromFileInMemoryEx
winhttp
WinHttpOpen
urlmon
URLOpenBlockingStreamA
shlwapi
PathFindFileNameW
ntdll
RtlCaptureContext
vcruntime140_1
__CxxFrameHandler4
vcruntime140
_CxxThrowException
api-ms-win-crt-stdio-l1-1-0
fflush
api-ms-win-crt-utility-l1-1-0
srand
api-ms-win-crt-string-l1-1-0
strcmp
api-ms-win-crt-heap-l1-1-0
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_cexit
api-ms-win-crt-convert-l1-1-0
strtol
api-ms-win-crt-time-l1-1-0
_mktime64
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
api-ms-win-crt-math-l1-1-0
acosf
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: - Virtual size: 778KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 307KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 399KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.K.o Size: - Virtual size: 35.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.]nd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.6La Size: 35.5MB - Virtual size: 35.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ