Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan-Ransom.MSIL.Gen.gen-eb04c2b51558d75ea988e7920429b4d2c56db55cb9560acde1d1637cb321fd78.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
HEUR-Trojan-Ransom.MSIL.Gen.gen-eb04c2b51558d75ea988e7920429b4d2c56db55cb9560acde1d1637cb321fd78.exe
Resource
win10v2004-20220901-en
General
-
Target
HEUR-Trojan-Ransom.MSIL.Gen.gen-eb04c2b51558d75ea988e7920429b4d2c56db55cb9560acde1d1637cb321fd78.exe
-
Size
1.0MB
-
MD5
fff1ac7c0e86b3f8b1918ec0bc722f68
-
SHA1
bc2a4ef39ec4ebf9a5827f9efd2255c669ebf0aa
-
SHA256
eb04c2b51558d75ea988e7920429b4d2c56db55cb9560acde1d1637cb321fd78
-
SHA512
6585a6fc6c7e4e47fd6ee29af44c2406ae2095490f55e740467323ab16fa2086d80d732019a9c2d2f8de9149cbeddd75bbd09634ae282ccae6b63cfc9aed29e0
-
SSDEEP
24576:1mEp+bl2LZ894kTja81N5Fjk4LfmVr2b2DamK0lFE:1jMbIZ894kBk0eG2+mKr
Malware Config
Signatures
Files
-
HEUR-Trojan-Ransom.MSIL.Gen.gen-eb04c2b51558d75ea988e7920429b4d2c56db55cb9560acde1d1637cb321fd78.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
JbksF+Z Size: 941KB - Virtual size: 941KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ