HEUR-Trojan-Ransom[.]MSIL[.]Agent[.]gen-5c66b77bc3ba1195098ceaedf2af5f71b6f554dba8c87b25fc724ee0931aa702[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HEUR-Trojan-Ransom.MSIL.Agent.gen-5c66b77bc3ba1195098ceaedf2af5f71b6f554dba8c87b25fc724ee0931aa702.exe
Size

864KB
MD5

eec6b24b1d35773c2262b4c579cce376
SHA1

515f88716bd2f80ded888c27faa0fe5937bd8fdf
SHA256

5c66b77bc3ba1195098ceaedf2af5f71b6f554dba8c87b25fc724ee0931aa702
SHA512

1ccdab907688814b7223a1d4bbbb965b79063f1d02494eeddc89d606ce1080753b2f48f0c0baa83145902356fa4edba324af3631b1aac4faa0fc3fe0fc09d7bd
SSDEEP

12288:M1gHU/n3KtwLu0mGOtR05xUalU1gHU/vVfHS7NAJegmDaq94equC7QsL:M6Hg3K2u0xOk5xU36HgvJy74qyeM

Score

N/A

Malware Config

Signatures

Files

HEUR-Trojan-Ransom.MSIL.Agent.gen-5c66b77bc3ba1195098ceaedf2af5f71b6f554dba8c87b25fc724ee0931aa702.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 749KB - Virtual size: 748KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ