Trojan-Ransom[.]Win32[.]Crypren[.]aiwv-9a3bfb52dccef5cca75699716c617dc99a02c9867f00851f384c5a310bc81dba[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Crypren.aiwv-9a3bfb52dccef5cca75699716c617dc99a02c9867f00851f384c5a310bc81dba.exe
Size

136KB
MD5

eaf66f82492c64d43ca4924f33b46ea4
SHA1

bed0e9e06c95332fe828c549ab0bc797aad82567
SHA256

9a3bfb52dccef5cca75699716c617dc99a02c9867f00851f384c5a310bc81dba
SHA512

d672331db74db5586daacdb7853e04666c8e4c32fba0634609efc0bf06ad59c9e8585d13da67c7740a3cc20981bedfe4d149176e3085ec4054be82411056f994
SSDEEP

3072:K6I99n0W3atmY7XiqDOKQPyNafBB7fpLMKQ0nUfj:nU9n0fvPaK1af9MH0Uf

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Crypren.aiwv-9a3bfb52dccef5cca75699716c617dc99a02c9867f00851f384c5a310bc81dba.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ