Behavioral task
behavioral1
Sample
55d3ae2adab4301ae8ff6d84c9dad332e51cbf7c15b0548b10ac37ccc47550be.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55d3ae2adab4301ae8ff6d84c9dad332e51cbf7c15b0548b10ac37ccc47550be.exe
Resource
win10v2004-20231215-en
General
-
Target
55d3ae2adab4301ae8ff6d84c9dad332e51cbf7c15b0548b10ac37ccc47550be.exe
-
Size
26KB
-
MD5
88e39005a1145337d615aa22576d1359
-
SHA1
8c5000dead78d34e5916bc4594ae564bfdcbe1cf
-
SHA256
c4a924d2e93e9aca4e57ebff39f26cc389e87190f14d480ef032f3eaf705aa08
-
SHA512
15e859de8c91e54d32d753740222d80957f391c6766f0a99f4a602b3ec651c89693cd3c8359bd52a2c27ebec886841cc671e8023917c7345b7555ea0a62dda3d
-
SSDEEP
384:qYenjLLAps4T5lBavzb/xlhKOVp91Qkb5hxDGX:5OElB6sc9GkbXxDc
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Detects command variations typically used by ransomware 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_GENRansomware -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55d3ae2adab4301ae8ff6d84c9dad332e51cbf7c15b0548b10ac37ccc47550be.exe
Files
-
55d3ae2adab4301ae8ff6d84c9dad332e51cbf7c15b0548b10ac37ccc47550be.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ