LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
ChromeSetup.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ChromeSetup.exe
Resource
win10v2004-20240802-en
Target
48edcd5f70bb537f79f8f36ee60764a191b5748c2dedcd3fc701c209bc1a5d90
Size
2.8MB
MD5
b2774416c4f26afc372c7ec554c76013
SHA1
ae174c5d1e847f6984f8b0c2367ea0ff4a3cf4d8
SHA256
48edcd5f70bb537f79f8f36ee60764a191b5748c2dedcd3fc701c209bc1a5d90
SHA512
0c76a015365c08727f751b1e4fa893cfbb8f1381a8416b752b3ba490b67dd04beb273a0b9ccdb7b49bba585fe9f20fbc18d6d02f2736ae3143bd3f0e79783a5b
SSDEEP
49152:yqJ4NbJ8yCBtB5HKQmoQTanP49oewEc04ksSNNxs1Z/Bx/GCKvO2TIajNC:x0bJGyQpQTkPbeBV4ksl/lKh/jg
Processes:
resource | yara_rule |
---|---|
static1/unpack001/ChromeSetup.exe | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/ChromeSetup.exe |
unpack002/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ