chaos | VBNFR_ | Triage

Sharing

General

Target

VBNFR_
Size

279KB
MD5

eced539ad810466a59e0433c892ad565
SHA1

8ad3bcc29bf32e6dad21db3338d8fd339d0c4b61
SHA256

f9f77ed5eb391d49883b6581aa0ddf32772d6e1ad8cf401277dfaf87ca7ee4e3
SHA512

583668b2f0c75f5efba8afc39d66e8e9ca16ff5eadeb495dce7e837dd5a0ecc0001065e7add10d6bafad24014722510ca2647280fc5f9f6e882fa9357937a9cb
SSDEEP

6144:pcH9nKVIEcXMVUHfwpZ6DzZmSkPcb8cfaRq7+7NE:phVQXkUHfEZ6pmhkb8UaRu+7NE

Score

10^/10

chaos

Malware Config

Signatures

Chaos Ransomware 1 IoCs

resource	yara_rule
sample	family_chaos

Chaos family
chaos

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VBNFR_

Files

VBNFR_
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ