E:\Programação\C++\GDI\MALWARE\Chorume\Debug\Chorume.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ChorumeDestructive (1).exe
Resource
win7-20240708-en
General
-
Target
ChorumeDestructive (1).exe
-
Size
422KB
-
MD5
9899401ba1c823c128e959d7de3ab5f6
-
SHA1
7d920fcc6a51b0fb4e66e7024dae1280b56a3297
-
SHA256
f9cbd2d541ac93c7d573d190fa11614e0d15da6256c5a941725d2bd55b2d6ab9
-
SHA512
66bd7a34a7229a3d632ae86487fa2dd9ef2cf14e5faffddb5f82ba9243928d8daf50a3151827561b0a587a6850ea7c515434f7de621f2158ccddae217b92fe6f
-
SSDEEP
6144:siprubKo5yzKaE4EwP0fKb8TvnewbDAbMPQXIKGKg+kfgEHAy0m9N74gGoAGu3:silubKaqW9wuKb8TPeUkN9GKgTfa83C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ChorumeDestructive (1).exe
Files
-
ChorumeDestructive (1).exe.exe windows:5 windows x86 arch:x86
7f2722cb9aee0a1061e0f5707e7f9563
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetStringTypeW
SetStdHandle
SetConsoleCtrlHandler
HeapSize
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
DecodePointer
CreateFileW
CloseHandle
WriteFile
Sleep
TerminateThread
CreateThread
HeapDestroy
GetFileType
HeapCreate
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCurrentThreadId
IsDebuggerPresent
RaiseException
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
GetProcAddress
InterlockedPushEntrySList
InterlockedFlushSList
GetModuleFileNameW
LoadLibraryExW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
GetStdHandle
GetModuleFileNameA
ExitProcess
GetModuleHandleExW
GetACP
GetCurrentThread
WaitForSingleObject
GetExitCodeProcess
CreateProcessA
CreateProcessW
GetFileAttributesExW
OutputDebugStringA
OutputDebugStringW
WaitForSingleObjectEx
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetDateFormatW
GetTimeFormatW
WriteConsoleW
user32
GetSystemMetrics
DrawIcon
GetDC
ReleaseDC
RedrawWindow
LoadIconW
GetDesktopWindow
MessageBoxA
GetWindowRect
gdi32
TextOutW
SetTextColor
SetStretchBltMode
StretchBlt
SetPixel
SetBkColor
SelectObject
SelectClipRgn
PlgBlt
LineTo
DeleteObject
CreateSolidBrush
CreateEllipticRgn
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
winmm
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
waveOutOpen
Sections
.text Size: 297KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.msvcjmc Size: 512B - Virtual size: 122B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ