ChaosGunStray[.]dll

General

Target
ChaosGunStray.dll
Size 160KB
Sample261012-yf6gnset81
SHA256 207d3bcbbaac8e0a869844ac0303c1bf704fb0122adc2b9e3f0525644ea1229b
MD5 832e0c7f47be62d8556c32a0140be9dd
SHA1 05af111717bbda73385db333b5ab94d9b0cdf8e2
SHA512 8beda1b7eb7535d33ed168d451c2450c799e5f726cbd3b372e25ee6c566d2cc1ac3e577ddfc2fc1c3f3686155ece98778f23ff823d190c96cc159d9cbacde02b
SSDEEP 3072:qKY0SFXJ9JWde4bYVDvdZZ4dWBswauTBaB8ksV6dKjQs1AscE/:qKY0SFXJ9JWde4bYVDvdZtBswauTULsn
TLSH
T199F36B4672E100BBE9B78234C9670A46E772B81147209B5F07E44379DF2F791AE3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ChaosGunStray.dll

File Explorer

ChaosGunStray.dll

.dll 160KB

ChaosGunStray.dll

IMPHASH 3ee03274fc9d67da4e67352c437a0d37
SHA256 207d3bcbbaac8e0a869844ac0303c1bf704fb0122adc2b9e3f0525644ea1229b
MD5 832e0c7f47be62d8556c32a0140be9dd
SHA1 05af111717bbda73385db333b5ab94d9b0cdf8e2
SHA512 8beda1b7eb7535d33ed168d451c2450c799e5f726cbd3b372e25ee6c566d2cc1ac3e577ddfc2fc1c3f3686155ece98778f23ff823d190c96cc159d9cbacde02b
SSDEEP 3072:qKY0SFXJ9JWde4bYVDvdZZ4dWBswauTBaB8ksV6dKjQs1AscE/:qKY0SFXJ9JWde4bYVDvdZtBswauTULsn
TLSH
T199F36B4672E100BBE9B78234C9670A46E772B81147209B5F07E44379DF2F791AE3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

18308

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

user32

GetAsyncKeyState

kernel32

RtlPcToFileHeader WriteConsoleW DisableThreadLibraryCalls GetModuleHandleA GetProcAddress GetModuleFileNameW GetPrivateProfileStringW MultiByteToWideChar WideCharToMultiByte HeapAlloc HeapFree GetProcessHeap CloseHandle SetEvent WaitForSingleObject CreateEventW CreateThread QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW CreateFileW RtlUnwindEx InterlockedFlushSList GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW SetFilePointerEx GetStringTypeW SetStdHandle HeapSize HeapReAlloc FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode

Sharing