Trojan-Ransom[.]Win32[.]Blocker[.]horu-cc29ff073f83e35cf339de7d9d49b7cc9acc5cfd25ac792281dfc8fc1f38d8c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.horu-cc29ff073f83e35cf339de7d9d49b7cc9acc5cfd25ac792281dfc8fc1f38d8c0
Size

202KB
MD5

8f6bef5e9a17d646dd6fbb9ce7c10342
SHA1

5607844f0156999dd4c5f1c608c4cb07760c40b4
SHA256

cc29ff073f83e35cf339de7d9d49b7cc9acc5cfd25ac792281dfc8fc1f38d8c0
SHA512

748f94ee80b7a508295c78a013fb6bbcbc98db0f8bce142bbdfdf083bd00a98633306439e27f5cbe14abe40e7368180989c0518489d1b458a9d092335d7cf74f
SSDEEP

3072:HmNCRwbYW1xORxmd3uLnRJQyP1Ev0Xqqsg7mA1cXyszNfiaA/QefzgSRK3hLHyEj:jGYR0utJ9+06xtDr8QYK3sNQ

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.horu-cc29ff073f83e35cf339de7d9d49b7cc9acc5cfd25ac792281dfc8fc1f38d8c0
.exe windows x86

cde0a219f8ff2e695c89dba0042b6865

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
WriteFile
ReadFile
SetFilePointer
CreateFileA
GetTickCount
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
Sleep
GetTempPathA
lstrlenA

shell32

ShellExecuteExA
ShellExecuteA
SHChangeNotify

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ