chaos | 325dfac6172cd279715ca8deb280eefe3544090f1583a2ddb5d43fc7fe3029ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

325dfac6172cd279715ca8deb280eefe3544090f1583a2ddb5d43fc7fe3029ed
Size

312KB
MD5

87cf616a75dcb238b269e16a83a0dd34
SHA1

e7cf55538fea566d790e0d0d73502b96f7afd492
SHA256

325dfac6172cd279715ca8deb280eefe3544090f1583a2ddb5d43fc7fe3029ed
SHA512

f3f8443c336f6c22ff0af33969c67e8fd41dfbaa5d3dba1f858ab0a485a2c90e824fd54574fa5c5cea009d17e39ddb8ca6bf21eeb920330d03b3d0c34b2bc978
SSDEEP

3072:K2RXzi2YcRVm16Pn6N9H5FEyyFx3Zt1O+DXkai2YcRPm16Pn6ckJ:JDiWm16wgiym168

Score

10^/10

chaos

Malware Config

Signatures

Chaos Ransomware 1 IoCs

resource	yara_rule
sample	family_chaos

Chaos family
chaos

Files

325dfac6172cd279715ca8deb280eefe3544090f1583a2ddb5d43fc7fe3029ed
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ