Behavioral task
behavioral1
Sample
Microsoft Edge.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Microsoft Edge.exe
Resource
win10v2004-20240426-en
General
-
Target
Microsoft Edge.exe
-
Size
202KB
-
MD5
0d2f471b69b41bbb1ec5ae51c95e2275
-
SHA1
e69d4d5267d3785850c10f288aa34d72cf4ab8d5
-
SHA256
d954f795ec9e5dcdf8bdaa4abfb52840554e5409cafb8ab5bc9f8361f7a4ff68
-
SHA512
a8733badd6e9cb64a8dcc4b6860bc8ba37060a465f2d818b7d1db04c8a6d7e97904a47d19620b50e0ba461a6bb3d631ec9be78656bccaee946a444935a9d5f76
-
SSDEEP
3072:Ho7kJr9UiTCmp6VF+hj5ifQloDIs8x0qyW5Uu7/e5BV0RUniyL4R:jr9UiT0P+hVljLvjvDe5v0RUYR
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Microsoft Edge.exe
Files
-
Microsoft Edge.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ