Behavioral task
behavioral1
Sample
c79b360459c7f9_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
c79b360459c7f9_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
c79b360459c7f9_JC.exe
-
Size
27KB
-
MD5
c79b360459c7f989e5484ddbfb15fb06
-
SHA1
3c1ce2c349480743bed3bf09f19213e2fc7242f9
-
SHA256
ea92a4fdcac18fa3d6e4ea87605ca207ac1c639cd3a3ec9e094f64689ef1d547
-
SHA512
1663720ab7bfa4b6665d2a2ac763448f798d9d461b1dd7883c8ca237bdb3225f7a22ede9107b3c6aa77121612a079bbdbfb28bce7d7c248cb8f075056a60bfa6
-
SSDEEP
384:wtWZPzzxAm1vmDRSFKW6pAnAQ5crlkOy5o915GMp1m82vl:F7zxAmGRSz6pVQ5Dho93GMpE829
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c79b360459c7f9_JC.exe
Files
-
c79b360459c7f9_JC.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ