General

Malware Config

Signatures

Files

• Taleb.Ransom.exe

  .exe windows x86

  02ed3575b7f1b355edc24642727fb2e7

  
  

  Code Sign

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ws2_32

  recv

  ntohl

  gethostname

  sendto

  recvfrom

  freeaddrinfo

  getaddrinfo

  select

  __WSAFDIsSet

  ioctlsocket

  listen

  htonl

  accept

  WSACleanup

  WSAStartup

  WSAIoctl

  WSASetLastError

  socket

  setsockopt

  ntohs

  htons

  getsockopt

  getsockname

  getpeername

  connect

  bind

  WSAGetLastError

  send

  closesocket

  normaliz

  IdnToAscii

  wldap32

  ord30

  ord79

  ord35

  ord33

  ord32

  ord27

  ord26

  ord301

  ord41

  ord50

  ord45

  ord60

  ord211

  ord46

  ord217

  ord143

  ord200

  ord22

  crypt32

  CertFreeCertificateChain

  CertGetCertificateChain

  CertFreeCertificateChainEngine

  CertCreateCertificateChainEngine

  CryptQueryObject

  CertGetNameStringA

  CertFindExtension

  CertAddCertificateContextToStore

  CryptDecodeObjectEx

  PFXImportCertStore

  CryptStringToBinaryA

  CertFreeCertificateContext

  CertFindCertificateInStore

  CertEnumCertificatesInStore

  CertCloseStore

  CertOpenStore

  advapi32

  CryptEncrypt

  CryptImportKey

  CryptDestroyKey

  CryptDestroyHash

  CryptHashData

  CryptCreateHash

  CryptGenRandom

  CryptGetHashParam

  CryptReleaseContext

  CryptAcquireContextA

  kernel32

  HeapFree

  HeapAlloc

  GetConsoleCP

  ReadConsoleW

  GetConsoleMode

  GetACP

  GetCommandLineW

  GetCommandLineA

  WriteFile

  GetModuleFileNameA

  GetDateFormatW

  SetFilePointerEx

  GetModuleHandleExW

  ExitThread

  FileTimeToSystemTime

  SystemTimeToTzSpecificLocalTime

  GetDriveTypeW

  RaiseException

  RtlUnwind

  WaitForSingleObject

  LoadLibraryW

  GetTimeFormatW

  IsValidLocale

  GetUserDefaultLCID

  EnumSystemLocalesW

  FlushFileBuffers

  GetExitCodeProcess

  CreateProcessA

  SetStdHandle

  GetTimeZoneInformation

  HeapReAlloc

  HeapSize

  FindFirstFileExA

  IsValidCodePage

  FindNextFileA

  GetOEMCP

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetEnvironmentVariableA

  GetProcessHeap

  WriteConsoleW

  SetEndOfFile

  ExitProcess

  CreateFileW

  GetLogicalDrives

  FindFirstFileW

  Process32First

  FindNextFileW

  TerminateProcess

  GetDriveTypeA

  FindClose

  OpenProcess

  CreateToolhelp32Snapshot

  Process32Next

  CloseHandle

  FreeConsole

  lstrcmpW

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSectionEx

  DeleteCriticalSection

  GetLastError

  SleepEx

  QueryPerformanceFrequency

  GetSystemDirectoryA

  FreeLibrary

  GetModuleHandleA

  GetProcAddress

  LoadLibraryA

  QueryPerformanceCounter

  GetTickCount

  Sleep

  MultiByteToWideChar

  WideCharToMultiByte

  MoveFileExA

  WaitForSingleObjectEx

  GetEnvironmentVariableA

  GetStdHandle

  GetFileType

  ReadFile

  PeekNamedPipe

  WaitForMultipleObjects

  SetLastError

  FormatMessageA

  VerSetConditionMask

  VerifyVersionInfoA

  CreateFileA

  GetFileSizeEx

  GetCurrentThread

  GetThreadTimes

  UnregisterWaitEx

  GetCurrentDirectoryW

  CreateDirectoryW

  DeleteFileW

  FindFirstFileExW

  GetDiskFreeSpaceExW

  GetFileAttributesExW

  GetFileInformationByHandle

  GetFullPathNameW

  AreFileApisANSI

  GetModuleHandleW

  CreateDirectoryExW

  CopyFileW

  MoveFileExW

  FormatMessageW

  GetStringTypeW

  TryEnterCriticalSection

  GetCurrentThreadId

  DuplicateHandle

  GetCurrentProcess

  SwitchToThread

  GetExitCodeThread

  InitializeCriticalSectionAndSpinCount

  CreateEventW

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetSystemTimeAsFileTime

  EncodePointer

  DecodePointer

  CompareStringW

  LCMapStringW

  GetLocaleInfoW

  GetCPInfo

  SetEvent

  ResetEvent

  InitializeSListHead

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsProcessorFeaturePresent

  IsDebuggerPresent

  GetStartupInfoW

  GetCurrentProcessId

  CreateTimerQueue

  SignalObjectAndWait

  CreateThread

  SetThreadPriority

  GetThreadPriority

  GetLogicalProcessorInformation

  CreateTimerQueueTimer

  ChangeTimerQueueTimer

  DeleteTimerQueueTimer

  GetNumaHighestNodeNumber

  GetProcessAffinityMask

  SetThreadAffinityMask

  RegisterWaitForSingleObject

  UnregisterWait

  FreeLibraryAndExitThread

  GetModuleFileNameW

  LoadLibraryExW

  GetVersionExW

  VirtualAlloc

  VirtualProtect

  VirtualFree

  ReleaseSemaphore

  InterlockedPopEntrySList

  InterlockedPushEntrySList

  InterlockedFlushSList

  QueryDepthSList

  Sections

  .text

  Size: 981KB - Virtual size: 981KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 231KB - Virtual size: 230KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 29KB - Virtual size: 44KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 57KB - Virtual size: 56KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ