chaos | 3b4601cf9b8aa62a1843cbb4f60d4f6435ff00ac91f3efa0221950aa84c8f04c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b4601cf9b8aa62a1843cbb4f60d4f6435ff00ac91f3efa0221950aa84c8f04c
Size

426KB
MD5

7c1a7587dbad352c2fa09c5429ecbc65
SHA1

b751ae175050134ac3907bc120d5f5b65f8bf1bd
SHA256

3b4601cf9b8aa62a1843cbb4f60d4f6435ff00ac91f3efa0221950aa84c8f04c
SHA512

d749d06e3100ac090bf582c044e3e03fb67e4b02fe53a0081cb4c8f46e31febd72fdf240d1c03d5694ba230496f180369ab4fd925497c6ccbb14eb45c715d32f
SSDEEP

12288:pSt9ZM+bg1CZLQHWNgqd88431KFb9kk+QM:yZsqdvB9PM

Score

10^/10

chaos

Malware Config

Signatures

Chaos Ransomware 1 IoCs

resource	yara_rule
sample	family_chaos

Chaos family
chaos

Files

3b4601cf9b8aa62a1843cbb4f60d4f6435ff00ac91f3efa0221950aa84c8f04c
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 419KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ