Behavioral task
behavioral1
Sample
22336b5cd4038c6fbdc9be837a8be6ab87fd102d7a37b41adab914e806d836b7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
22336b5cd4038c6fbdc9be837a8be6ab87fd102d7a37b41adab914e806d836b7.exe
Resource
win10v2004-20231222-en
General
-
Target
22336b5cd4038c6fbdc9be837a8be6ab87fd102d7a37b41adab914e806d836b7
-
Size
26KB
-
MD5
396ab5831641f974dbd5b2dfa7746261
-
SHA1
330f57d0dee74373c63ab28d221cf9988c8c8a06
-
SHA256
3448a4c75994d3e0d6fe0b99edc7758486a5640fd36f0586859c996ba8f9497e
-
SHA512
c42b8188d61da07ea45a2b0f237242fce4c9b298478e0c25467d5b849dd8dbb561e34700ac4852c11146486a715614edb64e2c8662da3cbbe3a540c17c85ca5e
-
SSDEEP
384:+fYenjLLAps4T5lBavzb/xlhKOVp91QGb5hxDGX:+WOElB6sc9GGbXxDM
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Detects command variations typically used by ransomware 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_GENRansomware -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22336b5cd4038c6fbdc9be837a8be6ab87fd102d7a37b41adab914e806d836b7
Files
-
22336b5cd4038c6fbdc9be837a8be6ab87fd102d7a37b41adab914e806d836b7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ