MecchaChameleon[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
MecchaChameleon.exe
Size 29.4MB
Sample260708-3pl7lsbv2w
SHA256 d93215d04e6b6be827d3236da38af3f854cff0feb439023c073c70cfca0b8ef5
MD5 af481c4727eafae30bd1fbe6d0a1d0cc
SHA1 b5d40dc01a482686d8b1a56e5d96bb6b785fe37d
SHA512 d1ab6c7b87d9a7d727cce89f80899ce2a1077c3a702fb4c3cb18eaa7ae19479e9aa40024778441b11ccfa6a2468c7dfd77ec221297d5bda5299c89209629de4a
SSDEEP 393216://FWJjK6RIT3rs2NuDYV0LP1CPwDvt3uFhC4Sx8Fe9XbYgtTYwjvkbU:1WJjKiKbVSJb
TLSH
T149679D0772709055FA76D03889538553E775BC9A2720A2EB319CB6392FB3BE21F7C648
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MecchaChameleon.exe

File Explorer

MecchaChameleon.exe

.exe 29.4MB

MecchaChameleon.exe

IMPHASH 8934b41d9b6d07ebda84932f357667ec
SHA256 d93215d04e6b6be827d3236da38af3f854cff0feb439023c073c70cfca0b8ef5
MD5 af481c4727eafae30bd1fbe6d0a1d0cc
SHA1 b5d40dc01a482686d8b1a56e5d96bb6b785fe37d
SHA512 d1ab6c7b87d9a7d727cce89f80899ce2a1077c3a702fb4c3cb18eaa7ae19479e9aa40024778441b11ccfa6a2468c7dfd77ec221297d5bda5299c89209629de4a
SSDEEP 393216://FWJjK6RIT3rs2NuDYV0LP1CPwDvt3uFhC4Sx8Fe9XbYgtTYwjvkbU:1WJjKiKbVSJb
TLSH
T149679D0772709055FA76D03889538553E775BC9A2720A2EB319CB6392FB3BE21F7C648
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19936

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

ShowWindow

api-ms-win-crt-convert-l1-1-0

mbstowcs wcstoul

api-ms-win-crt-filesystem-l1-1-0

_wrename

api-ms-win-crt-heap-l1-1-0

_set_new_mode free malloc

api-ms-win-crt-private-l1-1-0

__C_specific_handler wcschr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___wargv _cexit _configure_wide_argv _crt_atexit _errno _exit _initialize_wide_environment _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vswprintf fwrite puts

api-ms-win-crt-string-l1-1-0

_wcsdup _wcsicmp iswctype strcat strcpy strncpy wcscmp wcslen wcsncmp

kernel32

AddDllDirectory CloseHandle CopyFileW CreateDirectoryW CreateFileMappingW CreateFileW CreateProcessW DeleteCriticalSection DeleteFileW EnterCriticalSection FormatMessageA GetCommandLineW GetConsoleProcessList GetConsoleWindow GetCurrentProcessId GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileSize GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleExA GetProcAddress GetShortPathNameW GetStdHandle GetSystemTimeAsFileTime GetTempPathW InitializeCriticalSection K32GetModuleFileNameExW LeaveCriticalSection LoadLibraryExW MapViewOfFile OpenProcess QueryPerformanceCounter ReadFile SetConsoleCtrlHandler SetDllDirectoryW SetEnvironmentVariableW SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnmapViewOfFile VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile

shell32

CommandLineToArgvW SHFileOperationW SHGetFolderPathW

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-environment-l1-1-0

__p__wenviron

Name

.text

Size

66KB

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

29.3MB

Virtual Size

29.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

178KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

996B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

124B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

MecchaChameleon.exe

user32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

kernel32

shell32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-environment-l1-1-0

generic