chaos | Chaos Ransomware Builderv4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Chaos Ransomware Builderv4.exe
Size

695KB
MD5

7b5372d0823235bce65a29dfb08cd345
SHA1

72216a3a5cf1ff4ee3e7b5b2c421170050da6880
SHA256

179c9f059d346be3097c36b192980ea6de2f7679916eb45e6b9e5c2fc0d2b113
SHA512

1b5c59ac372f352eeaaba94f179de89b72ee8db112a9925ff053ca08c232002c4a0a2793646647991f9186c2322434b69dbe5e33e30f7a700b7cd76c493fc6ad
SSDEEP

6144:7iWm16WqJEsNiym16rntziSm167yLVB8Sx+w3FP6FKdh:7iWliyNntziSpOzgKd

Score

10^/10

chaos

Malware Config

Signatures

Chaos Ransomware 1 IoCs

resource	yara_rule
sample	family_chaos

Chaos family
chaos

Files

Chaos Ransomware Builderv4.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 692KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ