Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan-Ransom.MSIL.Agent.gen-66ec6a7bb5cec8d1205685833524b4f577af75570896e0b368f16e5ee0d2a955.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
HEUR-Trojan-Ransom.MSIL.Agent.gen-66ec6a7bb5cec8d1205685833524b4f577af75570896e0b368f16e5ee0d2a955.exe
Resource
win10v2004-20220812-en
General
-
Target
HEUR-Trojan-Ransom.MSIL.Agent.gen-66ec6a7bb5cec8d1205685833524b4f577af75570896e0b368f16e5ee0d2a955.exe
-
Size
14KB
-
MD5
65e18bae9b8c42b63bf3b969d3cdb6ca
-
SHA1
de1e804c81536890bccc963920095ade140b5173
-
SHA256
66ec6a7bb5cec8d1205685833524b4f577af75570896e0b368f16e5ee0d2a955
-
SHA512
32e45907c8ec7edeafbb699a3975ec52ae8255d692ebcfaf81ac87cbf118e069355e9c802574b707ce28a8e91aacfcda9ce185fd55910df9bcae9465c27aea15
-
SSDEEP
192:VwmJXzXNuc0T+lKdOdabU2iB8CXg6Sm/hlVN4nLnC/31im5ccz5a86IoIfVp1Us:Km5+bU276HzV2nLKlXBEItfV4s
Malware Config
Signatures
Files
-
HEUR-Trojan-Ransom.MSIL.Agent.gen-66ec6a7bb5cec8d1205685833524b4f577af75570896e0b368f16e5ee0d2a955.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
37:ea:ff:ce:3b:09:60:b7:47:94:10:f9:c5:cd:5f:adCertificate
IssuerCN=DESKTOP-NPHDS94\\AntigNot Before16/05/2020, 07:19Not After16/05/2021, 13:19SubjectCN=DESKTOP-NPHDS94\\Antig41:33:8f:ce:0e:1a:f0:77:0d:df:9a:94:41:d9:71:1f:3d:7c:2f:d3:6a:43:cd:09:b7:88:11:75:67:24:c0:aaSigner
Actual PE Digest41:33:8f:ce:0e:1a:f0:77:0d:df:9a:94:41:d9:71:1f:3d:7c:2f:d3:6a:43:cd:09:b7:88:11:75:67:24:c0:aaDigest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=DESKTOP-NPHDS94\\Antig15/09/2022, 14:52 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ