Chaos Solution[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Chaos Solution.exe
Size 6.4MB
Sample250922-w75ckssry2
SHA256 1dbb77aaaa897dca1ca3f911d6570df5c4bf9b2cafb88d2be8342fe032fb4ebb
MD5 6c0b293ef533afcffb3d34bc47f1971c
SHA1 ad342f1b7439453c4ec459e00d33d813dcaa8014
SHA512 9358daf7225b6038670f8220fb54be1524738151570b7897360cd3350ec2ecaf8604fd6957e95ace5d2c6d6269ecfa4b0da0120022736e34e359935f3d7a7dbb
SSDEEP 98304:MeRtUtk4ou2cdZdxsToXuikHehKxb/v9eH+GMC5iMbl7MZdzwy5YQY+L+1qp3VTQ:tvf8QoT10Z/v2lEMxab5DOl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Chaos Solution.exe

File Explorer

Chaos Solution.exe

.exe 6.4MB

Chaos Solution.exe

IMPHASH dc4152fd8ffd9d76d82af552da62e323
SHA256 1dbb77aaaa897dca1ca3f911d6570df5c4bf9b2cafb88d2be8342fe032fb4ebb
MD5 6c0b293ef533afcffb3d34bc47f1971c
SHA1 ad342f1b7439453c4ec459e00d33d813dcaa8014
SHA512 9358daf7225b6038670f8220fb54be1524738151570b7897360cd3350ec2ecaf8604fd6957e95ace5d2c6d6269ecfa4b0da0120022736e34e359935f3d7a7dbb
SSDEEP 98304:MeRtUtk4ou2cdZdxsToXuikHehKxb/v9eH+GMC5iMbl7MZdzwy5YQY+L+1qp3VTQ:tvf8QoT10Z/v2lEMxab5DOl
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4440413

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatW GetModuleFileNameA LoadLibraryA GetProcAddress GetCurrentProcess CloseHandle QueryPerformanceCounter QueryPerformanceFrequency Sleep GetCurrentThreadId MultiByteToWideChar GetStringTypeW GetLocaleInfoEx WideCharToMultiByte InitializeCriticalSectionEx GetSystemTimeAsFileTime GetModuleHandleW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetFileType GetModuleFileNameW GetModuleHandleExW WriteConsoleW ExitProcess WriteFile HeapFree HeapAlloc OutputDebugStringW GetTimeZoneInformation CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapSize CreateFileW HeapAlloc HeapFree ExitProcess LoadLibraryA GetModuleHandleA GetProcAddress

Name

.text

Size

Virtual Size

300KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

242KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.kX9

Size

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.GmO

Size

1024B

Virtual Size

748B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pk|

Size

6.2MB

Virtual Size

6.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

170KB

Virtual Size

170KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Chaos Solution.exe

kernel32

generic