chord_distributor_windows_x86[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
chord_distributor_windows_x86.exe
Size 15.0MB
Sample261110-n3bkpsfa93
SHA256 3189d575e7e08c259daacac346ddf59a5d53840c7db27e795517092e5c15be7e
MD5 92f6196999644d341b665035379da961
SHA1 e2b74381431d664e170b2f293460698c59f86a40
SHA512 84358ce1d672aa3c0a501ca58d95708caed80b5f6ec2aadabd1dd34fa631e9c570beb828271736b1b3e726e21e5ba50c837b41a96f9e2e0abe8edb81d92c0663
SSDEEP 393216:jRsLDCOZuejpi3zAmD13IRl/1OtHVLrwN95FOR7mIiHfYmp:C1DM3zyCKH
TLSH
T1FCF68D02B642A0FAC54B4170B01EA33E9F73912997148EE7C6D4ADB86DF57D02D7B62C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
chord_distributor_windows_x86.exe

File Explorer

chord_distributor_windows_x86.exe

.exe 15.0MB

chord_distributor_windows_x86.exe

IMPHASH 206a2a68e9a95a8b6f5b3d824373d815
SHA256 3189d575e7e08c259daacac346ddf59a5d53840c7db27e795517092e5c15be7e
MD5 92f6196999644d341b665035379da961
SHA1 e2b74381431d664e170b2f293460698c59f86a40
SHA512 84358ce1d672aa3c0a501ca58d95708caed80b5f6ec2aadabd1dd34fa631e9c570beb828271736b1b3e726e21e5ba50c837b41a96f9e2e0abe8edb81d92c0663
SSDEEP 393216:jRsLDCOZuejpi3zAmD13IRl/1OtHVLrwN95FOR7mIiHfYmp:C1DM3zyCKH
TLSH
T1FCF68D02B642A0FAC54B4170B01EA33E9F73912997148EE7C6D4ADB86DF57D02D7B62C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12271952

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

chord_distributor.pdb

user32

GetWindowRect IsProcessDPIAware OpenClipboard SetWindowDisplayAffinity SetWindowTextW EmptyClipboard SetForegroundWindow TrackPopupMenu SetMenuDefaultItem ShowCursor ClipCursor GetSystemMetrics GetClipCursor ClientToScreen AdjustWindowRectEx GetMenu EnableMenuItem GetSystemMenu ShowWindow IsIconic SendMessageW GetClipboardData CreateIcon ScreenToClient SetClipboardData DestroyIcon DestroyCursor CreateWindowExW RegisterClassExW MsgWaitForMultipleObjectsEx DefWindowProcW SetWindowLongW RegisterWindowMessageA MonitorFromPoint SystemParametersInfoA GetCursorPos MonitorFromWindow GetMonitorInfoW MonitorFromRect ReleaseDC GetDC CloseClipboard ReleaseCapture RegisterRawInputDevices SetCapture MapVirtualKeyW SendInput RegisterTouchWindow ValidateRect RedrawWindow InvalidateRgn ChangeDisplaySettingsExW GetRawInputData TrackMouseEvent GetTouchInputInfo CloseTouchInputHandle GetKeyboardState GetKeyState GetAsyncKeyState CreateWindowExA RegisterClassExA DefWindowProcA GetActiveWindow IsWindowVisible GetClientRect SetWindowPos SetWindowPlacement GetWindowPlacement DestroyWindow FlashWindowEx SetCursor LoadCursorW DispatchMessageW TranslateMessage PeekMessageW GetWindowLongW PostMessageW ActivateKeyboardLayout GetKeyboardLayout GetWindowThreadProcessId GetForegroundWindow ToUnicodeEx MapVirtualKeyExW

kernel32

GetSystemInfo UnmapViewOfFile CreateFileMappingW VirtualProtect MapViewOfFile GetSystemTimeAsFileTime IsProcessorFeaturePresent WriteConsoleW GetConsoleMode GetConsoleOutputCP FindNextFileW SetWaitableTimer CreateWaitableTimerExW GetCurrentThread SetHandleInformation GlobalFree GlobalAlloc GlobalUnlock GlobalSize GlobalLock Sleep CreateIoCompletionPort PostQueuedCompletionStatus FindClose FindFirstFileExW GetQueuedCompletionStatusEx SetFileCompletionNotificationModes GetOverlappedResult CancelIoEx GetProcAddress GetModuleHandleW SetNamedPipeHandleState SetFileTime CreateMutexA LoadLibraryExW FreeLibrary SetThreadErrorMode GetModuleHandleA FlushFileBuffers CreateFileW WaitForSingleObjectEx lstrlenW DuplicateHandle SetUnhandledExceptionFilter GetCurrentProcess GetEnvironmentVariableW GetCurrentDirectoryW WriteFile ReadFile GetCommState SetCommState EscapeCommFunction SetCommTimeouts ClearCommBreak ClearCommError GetCommModemStatus PurgeComm SetCommBreak SetThreadStackGuarantee SetFilePointerEx WideCharToMultiByte MultiByteToWideChar GetStdHandle GetFileInformationByHandleEx GetFileInformationByHandle GetCurrentThreadId RtlCaptureContext LoadLibraryExA SwitchToThread GetFinalPathNameByHandleW LoadLibraryA GetCurrentProcessId FormatMessageW CreateThread GetLastError HeapReAlloc SetFileInformationByHandle ReleaseMutex HeapAlloc GetFullPathNameW SetLastError GetUserPreferredUILanguages AddVectoredExceptionHandler RemoveVectoredExceptionHandler WaitForSingleObject CreateEventA QueryPerformanceCounter QueryPerformanceFrequency HeapFree GetProcessHeap InitializeSListHead CloseHandle

bcryptprimitives

ProcessPrng

advapi32

RevertToSelf ImpersonateAnonymousToken RegCreateKeyTransactedW RegQueryInfoKeyW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegQueryValueExW RegOpenKeyTransactedW RegEnumValueW

oleaut32

GetErrorInfo SysStringLen SysFreeString

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

gdi32

ChoosePixelFormat SwapBuffers DescribePixelFormat GetPixelFormat BitBlt SetPixelFormat DeleteObject CreateCompatibleDC DeleteDC CreateRectRgn SelectObject CreateDIBSection GetDeviceCaps

ws2_32

getaddrinfo WSACleanup WSAStartup WSAGetLastError WSAIoctl setsockopt shutdown freeaddrinfo WSASocketW send recv connect ioctlsocket WSASend getsockopt getsockname getpeername closesocket bind

crypt32

CertFreeCertificateChain CertDuplicateCertificateChain CertDuplicateStore CertFreeCertificateContext CertCloseStore CertVerifyCertificateChainPolicy CertGetCertificateChain CertEnumCertificatesInStore CertDuplicateCertificateContext CertOpenStore CertAddCertificateContextToStore

secur32

DeleteSecurityContext QueryContextAttributesW AcquireCredentialsHandleA EncryptMessage ApplyControlToken FreeContextBuffer InitializeSecurityContextW AcceptSecurityContext DecryptMessage FreeCredentialsHandle

shell32

DragFinish DragQueryFileW

ntdll

NtWriteFile NtReadFile NtDeviceIoControlFile NtCreateFile NtCancelIoFileEx RtlNtStatusToDosError

setupapi

SetupDiEnumDeviceInfo SetupDiOpenDevRegKey SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW SetupDiGetDeviceInstanceIdW SetupDiGetClassDevsW SetupDiClassGuidsFromNameW

cfgmgr32

CM_Get_DevNode_Status CM_Get_Parent CM_Get_Device_IDW

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmAssociateContextEx ImmGetContext ImmGetCompositionStringW ImmReleaseContext

ole32

OleInitialize RegisterDragDrop CoCreateInstance CoUninitialize CoInitializeEx RevokeDragDrop

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute

uxtheme

SetWindowTheme

opengl32

wglGetProcAddress wglDeleteContext wglCreateContext wglGetCurrentContext wglMakeCurrent

vcruntime140

memcmp memmove memcpy __CxxFrameHandler3 _CxxThrowException __current_exception __current_exception_context memset _except_handler4_common

api-ms-win-crt-math-l1-1-0

cbrtf atan2 fmod tan ceil truncf ldexp round exp2 log1p pow log floor log1pf acosh __setusermatherr log10 sin asinh log2 cos atan asin fma roundf acos _hypotf fmaf log2f trunc exp2f cosh sinh exp tanh

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-runtime-l1-1-0

_initterm_e _initterm exit _initialize_onexit_table _register_onexit_function _set_app_type _get_initial_narrow_environment __p___argv _initialize_narrow_environment _register_thread_local_exe_atexit_callback _configure_narrow_argv terminate _crt_atexit _c_exit _exit __p___argc strerror _seh_filter_exe _cexit _controlfp_s

api-ms-win-crt-locale-l1-1-0

_configthreadlocale