Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan-Ransom.Win32.Generic-6b167b5db9479f23463dcad1190e9f319b4747dab56e64ab142020fbbbe1b1c3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
HEUR-Trojan-Ransom.Win32.Generic-6b167b5db9479f23463dcad1190e9f319b4747dab56e64ab142020fbbbe1b1c3.exe
Resource
win10v2004-20220812-en
General
-
Target
HEUR-Trojan-Ransom.Win32.Generic-6b167b5db9479f23463dcad1190e9f319b4747dab56e64ab142020fbbbe1b1c3.exe
-
Size
62KB
-
MD5
093fdf024696c4bd632323169c51f487
-
SHA1
7a79285f8ea5e3b6cef88fc61394c305458b3dac
-
SHA256
6b167b5db9479f23463dcad1190e9f319b4747dab56e64ab142020fbbbe1b1c3
-
SHA512
122a9e1dc6e6a774857372f7aa52c032cf3ff901eb93fc63ec8f15a95fa339c9fc654a4b5165a5d29f053d0eff889a07876d019d20a4cfa2ba2c374b6c96a545
-
SSDEEP
768:VDKsMqCXfVcW3fM9Zk5ANIU3LWLDwUzc80gmq3oP/oDj:9KsePM9Zk5APyr/0O8/oX
Malware Config
Signatures
Files
-
HEUR-Trojan-Ransom.Win32.Generic-6b167b5db9479f23463dcad1190e9f319b4747dab56e64ab142020fbbbe1b1c3.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ