chifirium (2)[.]dll

Resubmissions

23/06/2026, 16:23

260623-tv528ses5j6

23/06/2026, 16:23

260623-tvs3nset5y3

Sharing

Copy URL Twitter E-mail

General

Target
chifirium (2).dll
Size 7.9MB
Sample260623-tvs3nset5y
SHA256 757a07ca649a615a261be2c37d4a5ce0cce5f727aed36e91199d5695983e8f46
MD5 cfa6866f13c83a1960a19be2a88fd203
SHA1 b9bd8f6a2fe4d98b2d91944c4b29ea857dbf8ebe
SHA512 c92f65e0b2a8447acfe710faa593c022faad975571696276cbae38ad9be27d806968dc21a1b3bf8f5f5c47a748584a7f7a7d986cf2576d73d14246346319a188
SSDEEP 196608:ljAgGMTm5GytD0cbWLntvZe2KLntvNUtJt02n:xGMTmLtD0LxvGVUrtz
TLSH
T137860191F393C024FB8D21749D7CD7BB5224B9340F2549CBB3E958989661FE22B78B06
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
chifirium (2).dll

File Explorer

chifirium (2).dll

.dll 7.9MB

chifirium (2).dll

IMPHASH 26cf2bf5b3c7065b7c876f8a3bd8b26a
SHA256 757a07ca649a615a261be2c37d4a5ce0cce5f727aed36e91199d5695983e8f46
MD5 cfa6866f13c83a1960a19be2a88fd203
SHA1 b9bd8f6a2fe4d98b2d91944c4b29ea857dbf8ebe
SHA512 c92f65e0b2a8447acfe710faa593c022faad975571696276cbae38ad9be27d806968dc21a1b3bf8f5f5c47a748584a7f7a7d986cf2576d73d14246346319a188
SSDEEP 196608:ljAgGMTm5GytD0cbWLntvZe2KLntvNUtJt02n:xGMTmLtD0LxvGVUrtz
TLSH
T137860191F393C024FB8D21749D7CD7BB5224B9340F2549CBB3E958989661FE22B78B06
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

chif

Minor OS version

Major OS version

Entry point

1475424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Users\prota\Desktop\chifirium\src\release\chifirium.pdb

kernel32

GlobalUnlock QueryPerformanceFrequency QueryPerformanceCounter VirtualFree VirtualAlloc VirtualQuery HeapCreate VirtualProtect HeapFree GetCurrentProcess Thread32Next Thread32First GetCurrentThreadId SuspendThread ResumeThread CreateToolhelp32Snapshot Sleep GetLastError HeapReAlloc CloseHandle HeapAlloc GetThreadContext GetProcAddress GetCurrentProcessId FlushInstructionCache SetThreadContext OpenThread GetConsoleScreenBufferInfo GlobalLock GetStdHandle WriteConsoleA WriteFile GetConsoleMode ReadFile CreateFileA SizeofResource FindResourceA LockResource LoadResource GetLocalTime GetTickCount64 GetModuleFileNameA LoadLibraryA DisableThreadLibraryCalls CreateThread GetModuleHandleA K32GetModuleInformation GetFileSizeEx GetProcessHeap MapViewOfFile UnmapViewOfFile CreateFileMappingA LoadLibraryExW InterlockedPushEntrySList WaitForSingleObject CreateEventW SetEvent FreeLibrary WideCharToMultiByte GlobalFree MultiByteToWideChar GlobalAlloc SetConsoleTextAttribute

user32

LoadCursorA ScreenToClient GetCapture ClientToScreen IsChild GetForegroundWindow GetAsyncKeyState CloseClipboard GetKeyState CallWindowProcW MessageBoxA SetCursor GetClientRect ReleaseCapture SetCursorPos GetCursorPos EmptyClipboard OpenClipboard SetWindowLongW SetCapture SetClipboardData GetClipboardData

msvcp140

??Bios_base@std@@QBE_NXZ ?_Xlength_error@std@@YAXPBD@Z ?_Xbad_alloc@std@@YAXXZ ?_Winerror_map@std@@YAHH@Z ?_Xbad_function_call@std@@YAXXZ ?_Syserror_map@std@@YAPBDH@Z ?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ _Cnd_signal ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Throw_Cpp_error@std@@YAXH@Z ?uncaught_exceptions@std@@YAHXZ ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?_Init@locale@std@@CAPAV_Locimp@12@_N@Z ?_Id_cnt@id@locale@std@@0HA ?_Xout_of_range@std@@YAXPBD@Z ?id@?$numpunct@D@std@@2V0locale@2@A ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z _Mtx_lock _Thrd_id _Xtime_get_ticks _Thrd_join _Mtx_unlock ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?good@ios_base@std@@QBE_NXZ ?always_noconv@codecvt_base@std@@QBE_NXZ ??1facet@locale@std@@MAE@XZ ??0facet@locale@std@@IAE@I@Z ?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UAEXXZ ?_Gettrue@_Locinfo@std@@QBEPBDXZ ?_Getfalse@_Locinfo@std@@QBEPBDXZ ??1_Locinfo@std@@QAE@XZ ??0_Locinfo@std@@QAE@PBD@Z ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ ?_ReportUnobservedException@details@Concurrency@@YAXXZ ?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z ?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ ?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z ?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ ?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ ?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ ?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z ??0task_continuation_context@Concurrency@@AAE@XZ ?__ExceptionPtrCreate@@YAXPAX@Z ?__ExceptionPtrCopy@@YAXPAXPBX@Z ?__ExceptionPtrDestroy@@YAXPAX@Z ?__ExceptionPtrCurrentException@@YAXPAX@Z _Cnd_wait _Cnd_broadcast _Query_perf_frequency _Query_perf_counter ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z ?__ExceptionPtrRethrow@@YAXPBX@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z ?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z

d3dx9_43

D3DXCreateTextureFromFileInMemory D3DXCreateTextureFromFileInMemoryEx

imm32

ImmReleaseContext ImmSetCompositionWindow ImmGetContext ImmSetCandidateWindow

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockExclusive AcquireSRWLockExclusive

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW InitOnceComplete WakeAllConditionVariable InitOnceBeginInitialize

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter SetUnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-localization-l1-2-0

FormatMessageA GetLocaleInfoEx

api-ms-win-core-file-l1-1-0

SetFileInformationByHandle GetFileAttributesExW FindNextFileW FindFirstFileExW FindFirstFileW FindClose CreateFileW CreateDirectoryW

api-ms-win-core-file-l1-2-2

AreFileApisANSI

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx

vcruntime140

_setjmp3 memmove __RTDynamicCast memchr __std_exception_destroy memcpy __std_type_info_destroy_list _except_handler4_common __current_exception_context __current_exception _CxxThrowException longjmp strrchr __CxxFrameHandler3 memset __std_exception_copy __std_terminate strstr __std_type_info_compare _purecall

api-ms-win-crt-stdio-l1-1-0

_get_stream_buffer_pointers _fseeki64 fflush __acrt_iob_func fclose fseek __stdio_common_vfprintf ungetc fwrite ftell setvbuf fsetpos __stdio_common_vsprintf_s fgetpos fgetc _wfopen __stdio_common_vsprintf fread __stdio_common_vsscanf fputc

api-ms-win-crt-runtime-l1-1-0

_errno _initterm_e _initterm _cexit terminate _invalid_parameter_noinfo _invoke_watson abort _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit

api-ms-win-crt-utility-l1-1-0

rand qsort

api-ms-win-crt-string-l1-1-0

strncpy_s iswspace isdigit towlower toupper strcpy_s strncmp strncpy

api-ms-win-crt-heap-l1-1-0

free _callnewh malloc calloc

api-ms-win-crt-convert-l1-1-0

strtol strtoull wcstombs strtod strtoul strtoll atof

api-ms-win-crt-time-l1-1-0

_localtime64_s _mktime64 strftime _mkgmtime64 _gmtime64_s

api-ms-win-crt-math-l1-1-0

_libm_sse2_exp_precise _libm_sse2_cos_precise _fdsign _libm_sse2_sqrt_precise _libm_sse2_atan_precise _libm_sse2_acos_precise _ldsign _dsign _libm_sse2_log_precise _libm_sse2_sin_precise _hypotf remainderf _CIfmod _ldclass _fdclass ceil _dclass floor roundf _CIatan2 fminf _libm_sse2_pow_precise

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

api-ms-win-crt-locale-l1-1-0

localeconv ___lc_codepage_func

ole32

CoCreateFreeThreadedMarshaler

oleaut32

SetErrorInfo SysStringLen SysFreeString GetErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory