Behavioral task
behavioral1
Sample
ChromeUpdate.exe
Resource
win10ltsc2021-20250217-en
Behavioral task
behavioral2
Sample
ChromeUpdate.exe
Resource
win11-20250217-en
Errors
General
-
Target
ChromeUpdate.exe
-
Size
238KB
-
MD5
bac16142016d690c8769d21668736653
-
SHA1
4b7c1ca4e7b8739c739980c0b830010a87ceff13
-
SHA256
7cd9183c01c3c913ea5ea3f0a9cfb0f9594bfae61e6582204786bc4d406614aa
-
SHA512
50659e8e0e05180ad0acb27b46cfbe7ccdbce8ba97f240b3e6c7e1084e8afaa0624fd1eff82b830c3eb25db45596f6a437bd0cd9ef9d2a3f83fb80f4d015437f
-
SSDEEP
6144:mDp5I4So24RJMMC1RK4/mUGGR5nvn/4eHZZ+cvlFq9yu6x8vTeVYNLjoqQkeDR2r:mDp5I4So24RJM11RK4/mUGGR5nvn/4eQ
Malware Config
Signatures
-
Detect Xworm Payload 1 IoCs
resource yara_rule sample family_xworm -
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ChromeUpdate.exe
Files
-
ChromeUpdate.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ