Behavioral task
behavioral1
Sample
ESET Crack.exe
Resource
win11-20240508-en
General
-
Target
ESET Crack.exe
-
Size
381KB
-
MD5
ad284d8e19e16bb34a12648c219eff2d
-
SHA1
d5371b5cbc05c75548112b2ab42b47b4a695ac0a
-
SHA256
7e620a991e554e89cfdb7ca4b131e237cd9936bd14ef48dc52872e0793415135
-
SHA512
24ff90ba62bab82fab76bc5f748a4fc13708a484fdebdc6320f068b8fc42da8723c6e0253fab1752e1ed8c3de8bfcbd8850c7bb1d7be6cd02a88c03a0b4c4b00
-
SSDEEP
6144:eB0r9q8EF+HSt/TRAfo7f4Zp3Ld61GN4SwNqEzf:e2EF+HS9TRAfo7f4ZpLc1GN4SwNqEzf
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ESET Crack.exe
Files
-
ESET Crack.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 379KB - Virtual size: 378KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ