Trojan-Ransom[.]Win32[.]Blocker[.]horu-d00547fcd5b78224a8804436772b94cd52dad2ff939e269ca872e749981501bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.horu-d00547fcd5b78224a8804436772b94cd52dad2ff939e269ca872e749981501bd
Size

1.6MB
MD5

49b83ddb2de412384201e2876cb17e34
SHA1

a7ff39eab7cd41617b8817842c8185c3f7b3681c
SHA256

d00547fcd5b78224a8804436772b94cd52dad2ff939e269ca872e749981501bd
SHA512

7639678a0396a295c422163e70520543a9555efd12bc91e3545d9eb0d6ad0d242202dea4bf34dc94a97f9224dfa5da6517f9067eecc5c4076b9dea80b60f11dd
SSDEEP

24576:xoVn3j+msg/sI84LoBrh1IbTMCByge8XY2GyDxRy8Tx9jV7xQKcYnA66UcCU:wn3jsIB8BrIgaZIKD//x9jV7x5cYNFct

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.horu-d00547fcd5b78224a8804436772b94cd52dad2ff939e269ca872e749981501bd
.exe windows x86

cde0a219f8ff2e695c89dba0042b6865

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
WriteFile
ReadFile
SetFilePointer
CreateFileA
GetTickCount
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
Sleep
GetTempPathA
lstrlenA

shell32

ShellExecuteExA
ShellExecuteA
SHChangeNotify

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE