chp[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
chp.exe
Size 33KB
Sample260909-x77y5sam5t
SHA256 dc12c6b2043341198c2f43cbf8fa03a2b378b143bd89b510e55790ba5c8fba24
MD5 e58e472390ddaec39d6ceab25e65ebaa
SHA1 78a86bbba28bb3b05befb027f83ed107bd557a72
SHA512 e91709ce9353bf634c7d4e45f111b6a9a53d6286cb1048b49bb6cb772d9eb52cf04eca6b5f0dc738a9e0a1098daf86819ab133d90f20790da8a473270f2c2a04
SSDEEP 384:XXo2HDWj1ycoPBzpKrkXXESI6ZiZ0OonMSdxvwkZUysjvRuZoijtBKYkOlCtNRuk:Hf//tZiSOOfakZlsjeEYtQpG3fB
TLSH
T19FF2A71ADD27A06BD39E8D74CA134D05DE72BCC6DBD1B6CB67410CE20DA5A949F3E202
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
chp.exe

File Explorer

chp.exe

.exe 33KB

chp.exe

IMPHASH 2000815260aaac431c8a62d0740d7ae2
SHA256 dc12c6b2043341198c2f43cbf8fa03a2b378b143bd89b510e55790ba5c8fba24
MD5 e58e472390ddaec39d6ceab25e65ebaa
SHA1 78a86bbba28bb3b05befb027f83ed107bd557a72
SHA512 e91709ce9353bf634c7d4e45f111b6a9a53d6286cb1048b49bb6cb772d9eb52cf04eca6b5f0dc738a9e0a1098daf86819ab133d90f20790da8a473270f2c2a04
SSDEEP 384:XXo2HDWj1ycoPBzpKrkXXESI6ZiZ0OonMSdxvwkZUysjvRuZoijtBKYkOlCtNRuk:Hf//tZiSOOfakZlsjeEYtQpG3fB
TLSH
T19FF2A71ADD27A06BD39E8D74CA134D05DE72BCC6DBD1B6CB67410CE20DA5A949F3E202
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13664

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Kaisc\source\repos\chp\x64\Release\chp.pdb

msvcp140

?good@ios_base@std@@QEBA_NXZ ?uncaught_exception@std@@YA_NXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Xout_of_range@std@@YAXPEBD@Z ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xlength_error@std@@YAXPEBD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

winhttp

WinHttpReceiveResponse WinHttpOpen WinHttpReadData WinHttpOpenRequest WinHttpConnect WinHttpCloseHandle WinHttpQueryHeaders WinHttpSendRequest

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler _CxxThrowException __current_exception __current_exception_context memcpy memcmp __std_exception_copy __std_exception_destroy memset memmove __std_terminate

api-ms-win-crt-runtime-l1-1-0

_crt_atexit terminate __p___argv _register_onexit_function _c_exit _exit _initialize_onexit_table _seh_filter_exe _cexit _register_thread_local_exe_atexit_callback _invoke_watson exit _initterm_e _initterm __p___argc _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _set_app_type

api-ms-win-crt-heap-l1-1-0

_callnewh free _set_new_mode malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

InitializeSListHead RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime RtlCaptureContext IsDebuggerPresent GetModuleHandleW