Behavioral task
behavioral1
Sample
sample.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
sample.exe
Resource
win10v2004-20220812-en
General
-
Target
3c0442d0209bfab81b07f71f19a6ebc6c85722a638b3ddb4665cd4bc80284e73.bin.sample.gz
-
Size
12KB
-
MD5
558a4f5096b3555d95d7afb4cfeea59a
-
SHA1
4b57fa0527debe82e01e703b91d1603ec1395cbc
-
SHA256
7ecf7f60775c6079afea3b622a72c96ef88b7a335efc504666f4fc3cfb4d7dc1
-
SHA512
eb195498077bbc37daabc53ec372379cc1629c082e3eab398dc5bcf46e680087f9e584274335662321d7767eb3179809bd311702f328d54fa71f082e755a92c6
-
SSDEEP
192:FmwTEUIcmPANcIxsoR1zKsmrgQZf3XLyIJFHJkMVGFF2ZCe9CRcZB9X3PXPiu4is:DwUISx5iLy1MVGL2ZTrhvquTs
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule static1/unpack001/sample family_chaos -
Chaos family
Files
-
3c0442d0209bfab81b07f71f19a6ebc6c85722a638b3ddb4665cd4bc80284e73.bin.sample.gz.gz
-
sample.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ