Behavioral task
behavioral1
Sample
5e74e1376402e6587804066944f3087dbbb6b0c921df199484a9509421841601.exe
Resource
win10v2004-20220812-en
General
-
Target
5e74e1376402e6587804066944f3087dbbb6b0c921df199484a9509421841601
-
Size
622KB
-
MD5
fc8e0d444acd3d5511945f429f613ed6
-
SHA1
ebc0fa80d1c182c8fb42b9fe73609c7b1783b8e3
-
SHA256
5e74e1376402e6587804066944f3087dbbb6b0c921df199484a9509421841601
-
SHA512
48da80f131e975054cd8a07e1a30fea1528915fec8fb2a692b6c76049adee004835000ceeff1abe7eb3b2d7406e8f7e15121e3cac703ce598b8c4f0006923b30
-
SSDEEP
12288:ajYidHp0JjCp0FSoqJxQu+MfPjQRgJjzTg6FD:ajYFjCqFSTfLM
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
Files
-
5e74e1376402e6587804066944f3087dbbb6b0c921df199484a9509421841601.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 415KB - Virtual size: 414KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ