Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.MSIL.Encoder.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.MSIL.Encoder.exe
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.MSIL.Encoder.gen-fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a
-
Size
316KB
-
MD5
cefa3818648f481c93acb3e95241e211
-
SHA1
c6d9addf290419d825724909f8bd01d44f2067a7
-
SHA256
fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a
-
SHA512
9ce8142a53993e132714db6f8aadb8929d0db40539e5104eb57f265673e7e214c1cf277e137e21ba6b7264adee543f368f66bf90f0bdd73da4b4042365680283
-
SSDEEP
6144:0tH1Q69RgUnTtcUx5rlxQamSsDan8ddaS/nEG54KcEGhlCJyyo:G97gSt7QamSsYUaM/KKcEGhcU
Malware Config
Signatures
Files
-
Trojan-Ransom.MSIL.Encoder.gen-fc61c3cbae6f6926294861aded1750af4c5019daae532e531f35dd575071c87a.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 230KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ