chaos | 123e5d8a15d6308a9af28add4e4944f9[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

123e5d8a15d6308a9af28add4e4944f9.bin
Size

10KB
MD5

cb00e4a86b5395babf1f05288012f339
SHA1

cf1a97ae5c46b70f5e06273462547ea4be6fbd84
SHA256

66ce63a8a402791e13cdb01ca21b561070242dad10d4babb38075932d9959d26
SHA512

619142189c2387f894f20d5e9c419b68f49e4797ba72b104de7a574dbf87c5f2c59671416d3dc5d388967faef586dd882d601094b7994edd96232de300d5434c
SSDEEP

192:3H3xn22OKd/6LOY3GwVHpgQMIIJOzbXz/WKaRNxox:nXOKdCCY3r9pKOzzz5aRNxox

Score

10^/10

chaos

Malware Config

Signatures

Chaos Ransomware 1 IoCs

resource	yara_rule
static1/unpack001/055fdea9c341e6abbf8dc0a085c62c02c111f912d034d597b2cdc9d760602e61.exe	family_chaos

Chaos family
chaos

Files

123e5d8a15d6308a9af28add4e4944f9.bin
.zip

Password: infected
055fdea9c341e6abbf8dc0a085c62c02c111f912d034d597b2cdc9d760602e61.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ