Behavioral task
behavioral1
Sample
ac34d6abb231c6df1053030b6be64a5ee8cbffbaa193e0a6d5ee0430a026f138.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ac34d6abb231c6df1053030b6be64a5ee8cbffbaa193e0a6d5ee0430a026f138.exe
Resource
win10v2004-20220812-en
General
-
Target
ac34d6abb231c6df1053030b6be64a5ee8cbffbaa193e0a6d5ee0430a026f138
-
Size
180KB
-
MD5
cd2dee9d48983549038140a754236187
-
SHA1
004b118b1ac133c85033cbf6645d2a98c33cb515
-
SHA256
ac34d6abb231c6df1053030b6be64a5ee8cbffbaa193e0a6d5ee0430a026f138
-
SHA512
5e7d3ffdfccc4be61303c47084738f6e1a99b9b86ec7549b327dfaf6157c5681fc896c1281ca9b42eccf398719825e29a455ca59a4a8f74432caed4c5d21da75
-
SSDEEP
3072:IoxNB0r9BWwzfKh/DvAg5XcIv2eZ3/hw84Gorj+tiNlGxHGVz3uL/TOc/1eva:Ir9BWwzSprAgFOeZ3oGkj+INSHswRH
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
Files
-
ac34d6abb231c6df1053030b6be64a5ee8cbffbaa193e0a6d5ee0430a026f138.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ