Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Onion.exe
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Onion.i-566360ae20f44151f99680013bccc847da9d36abd196bed56b98ba6117dbad66
-
Size
658KB
-
MD5
e74db5809e677550f1a6a2e66bf23249
-
SHA1
312aaa9d937ccf126ba87bddb7456335ab6b6424
-
SHA256
566360ae20f44151f99680013bccc847da9d36abd196bed56b98ba6117dbad66
-
SHA512
f1717cf5a9f1ef48ff84805555971a7cc05fe63f3482be522bac69603c9d6a766b10b9cec179a3ee03d7ed07ba412f502f2eec312851fd3d86d5f76b07f068fd
-
SSDEEP
12288:+0ah1qOLD0qcm/2o/s55OYH9m33tssAvPYIPZrViKxeWbjILA2x:+0aTbD0O+o/GRw3YzPHxxjeA2x
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Onion.i-566360ae20f44151f99680013bccc847da9d36abd196bed56b98ba6117dbad66.exe windows x86
a83cc134fa3aa2128cc1adc22515deaa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualAlloc
VirtualProtect
GetProcAddress
Sections
.text Size: 657KB - Virtual size: 657KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ