Behavioral task
behavioral1
Sample
148c2d55d317029444578d478aeedcc834cffa4db695702adc8add568b517557.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
148c2d55d317029444578d478aeedcc834cffa4db695702adc8add568b517557.exe
Resource
win10v2004-20220812-en
General
-
Target
148c2d55d317029444578d478aeedcc834cffa4db695702adc8add568b517557
-
Size
23KB
-
MD5
f739d9e0a8ba8b82f65ef09f6d7d4dc6
-
SHA1
ab94d1c1ec147ea6bfd159cc740a9f7fce54e840
-
SHA256
148c2d55d317029444578d478aeedcc834cffa4db695702adc8add568b517557
-
SHA512
c98a68f8232c73e8be9e001f4a7049f29d5f884ee429aea81f36f0534ced913f0dcae54e09a9b1272b69955c9121b831378255ec872f59ec6d698ec94899eead
-
SSDEEP
384:z3Mg/bqo2LgyOg/Uzv3pzDKF+98cJAr91CkkzLb5Me1:Fqo2514pzDKN0Ar9RqLb2e1
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
Files
-
148c2d55d317029444578d478aeedcc834cffa4db695702adc8add568b517557.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ