Behavioral task
behavioral1
Sample
2dd3144ab294d675eae0290d5b2d385d4d7ddb36e0450b982358a1519ba19fb4.exe
Resource
win11-20241007-en
General
-
Target
2dd3144ab294d675eae0290d5b2d385d4d7ddb36e0450b982358a1519ba19fb4.zip
-
Size
2.3MB
-
MD5
e3a7e976ffab74d95fadf15c790f18a9
-
SHA1
1b126605ab7f85764599c19ec2919efcc617a313
-
SHA256
369d6eb42c0ce2b287402481762de93116e9beb2331a524941e025083c763b1c
-
SHA512
445fb39782b11f09f9d1e5e85f186d070e95768b82a9742a682fa0cf4117f7f51e08d8e094015f95ea229384d69b73312983c951aebd3c6ca07a476f3322858c
-
SSDEEP
49152:1BdFCLuUObygZb0VKvIMcmjMgESqujVzfxfE7kiqSSF9jal:1XFQuUNKi324gESq4zZ87kiqSK9jal
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule static1/unpack001/2dd3144ab294d675eae0290d5b2d385d4d7ddb36e0450b982358a1519ba19fb4.exe family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2dd3144ab294d675eae0290d5b2d385d4d7ddb36e0450b982358a1519ba19fb4.exe
Files
-
2dd3144ab294d675eae0290d5b2d385d4d7ddb36e0450b982358a1519ba19fb4.zip.zip
Password: infected
-
2dd3144ab294d675eae0290d5b2d385d4d7ddb36e0450b982358a1519ba19fb4.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ