HEUR-Trojan-Ransom[.]Win32[.]Generic-1aa9716d4d2bb22285993a195d70565e8ab1420f81f5fd9d90601b4050bddde5[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HEUR-Trojan-Ransom.Win32.Generic-1aa9716d4d2bb22285993a195d70565e8ab1420f81f5fd9d90601b4050bddde5.exe
Size

3.5MB
MD5

67ba624e074ac4c20f5edb9ccfb95ab5
SHA1

7047f5c03ebd28f024dadec77718ab0e1fcc0ed4
SHA256

1aa9716d4d2bb22285993a195d70565e8ab1420f81f5fd9d90601b4050bddde5
SHA512

1bec77f6a73911fad3b15a92e7509554430308fef6f7973eae8485d29c4b9b4c25639f1a55a000ad3ab1ea3946242601bf051347d984bd1f7a03cc138520b2d6
SSDEEP

98304:rANJpFHFEGxuIDPB+249X+T5K9Ww2LKKHW:rtGfD0249uT5K9J2

Score

N/A

Malware Config

Signatures

Files

HEUR-Trojan-Ransom.Win32.Generic-1aa9716d4d2bb22285993a195d70565e8ab1420f81f5fd9d90601b4050bddde5.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ