Trojan-Ransom[.]Win32[.]Blocker[.]horu-b6dae1974e7a65f732bf6b2703bc9732cdc83747e457cd5542165a24cae27731 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.horu-b6dae1974e7a65f732bf6b2703bc9732cdc83747e457cd5542165a24cae27731
Size

3.0MB
MD5

12ec4530dd28d8a791fda64668f38365
SHA1

e342aab9b508e4c3a5d9907676e9734026b05dee
SHA256

b6dae1974e7a65f732bf6b2703bc9732cdc83747e457cd5542165a24cae27731
SHA512

00e9691ae83e95506d3344dece2e2bffbbc3c37aff5a628bcd6ebec6e72eceb3b10201fe22e8a73fe251dbbf1fff8058bd80f2d2527f155ce02004c65c51e237
SSDEEP

24576:rbNmL/bWN1JF+gp56s5+eVDrdqdi4Oa1Mx9TJFdsdKlV2PGKkYK1AX0+cU:A3U1ugpBrfYMrTdePGdYtX0+cU

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.horu-b6dae1974e7a65f732bf6b2703bc9732cdc83747e457cd5542165a24cae27731
.exe windows x86

cde0a219f8ff2e695c89dba0042b6865

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
WriteFile
ReadFile
SetFilePointer
CreateFileA
GetTickCount
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
Sleep
GetTempPathA
lstrlenA

shell32

ShellExecuteExA
ShellExecuteA
SHChangeNotify

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ