chaos | ae36758124f59c90cedb85796ff4432fbd25df1a6407b8a0168693664a394fd3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae36758124f59c90cedb85796ff4432fbd25df1a6407b8a0168693664a394fd3
Size

496KB
MD5

dd6b2c4c8aa41639409f24413a3c5879
SHA1

4ae29959377d36544a7207c5a140bfff56c7fb82
SHA256

ae36758124f59c90cedb85796ff4432fbd25df1a6407b8a0168693664a394fd3
SHA512

eced86a7f9035bce82736d1ca0d08e6c5764143a829889c94c798fb4a0eb985df9b1a43bf3d829dfad8d1ff82f3451099d952002bbdc0f4be7c96327e56a25dd
SSDEEP

12288:EOPEsm8dXym65/MKIzcdtC3EI4mXiSpHXRDWfYjtcpppw:PqaCdmRXgG

Score

10^/10

chaos

Malware Config

Signatures

Chaos Ransomware 1 IoCs

resource	yara_rule
sample	family_chaos

Chaos family
chaos

Files

ae36758124f59c90cedb85796ff4432fbd25df1a6407b8a0168693664a394fd3
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 427KB - Virtual size: 427KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ