Behavioral task
behavioral1
Sample
e4b1834ad92f9679409eba715e100239a54db4e1a8920900e78da5e3ff089d54.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4b1834ad92f9679409eba715e100239a54db4e1a8920900e78da5e3ff089d54.exe
Resource
win10v2004-20220812-en
General
-
Target
e4b1834ad92f9679409eba715e100239a54db4e1a8920900e78da5e3ff089d54
-
Size
106KB
-
MD5
38429834fe4ee9ac853c03e1efc7a69b
-
SHA1
ff216e1188da8ca63dca81b957a566e5b06b5483
-
SHA256
e4b1834ad92f9679409eba715e100239a54db4e1a8920900e78da5e3ff089d54
-
SHA512
25e5b9abd8e23073f8ae81443db84251b8a76bb8e9952c576d12f6bd2afb11e953f2505766d6d243e8faf11ef92d4e1e57ed07578b84cdcc76bb47db10ece086
-
SSDEEP
3072:qNoCt9MPr9rk9HqhK5gLqYC2w6/XE9jKgmYGR:K6r9rkHfeLc6vEpY
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
Files
-
e4b1834ad92f9679409eba715e100239a54db4e1a8920900e78da5e3ff089d54.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ