Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Cryptor.etj-e95902e83c3cd7ceef665f91faba200dd487a073996e34ae3f041a00d0a061a5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Cryptor.etj-e95902e83c3cd7ceef665f91faba200dd487a073996e34ae3f041a00d0a061a5.exe
Resource
win10v2004-20220901-en
General
-
Target
Trojan-Ransom.Win32.Cryptor.etj-e95902e83c3cd7ceef665f91faba200dd487a073996e34ae3f041a00d0a061a5.exe
-
Size
125KB
-
MD5
f28ac8c53e1776f0bb151bfe969cb50c
-
SHA1
ac6d92aa5213bf0431999688f63c37d72a6206bf
-
SHA256
e95902e83c3cd7ceef665f91faba200dd487a073996e34ae3f041a00d0a061a5
-
SHA512
5ccb69f839dda459fca95a0731a152f831e32e23521e47506710a824a1d5779d59ce1752f623b700a1416263a5537f7c92c16f43c6c9ded028839493bbed8e7c
-
SSDEEP
3072:bM5Kyu/Dyo84V1+vc+07o99BDFgz+Ib2fPEGhsV6nedzSg:I5EDyo868k+vHwzsPEGhsV6nedz
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Cryptor.etj-e95902e83c3cd7ceef665f91faba200dd487a073996e34ae3f041a00d0a061a5.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
x6%/0~ Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ