Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan-Ransom.Win32.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
HEUR-Trojan-Ransom.Win32.dll
Resource
win10v2004-20220812-en
General
-
Target
HEUR-Trojan-Ransom.Win32.Generic-4597137e26d17e60b2ecae6690c2ab5b29207aff2e555f84751943a2a876aa54
-
Size
1.2MB
-
MD5
5dc019baa66321726e4e9897b8678d05
-
SHA1
510b84068f0652736e8891cae11eac51ce697b00
-
SHA256
4597137e26d17e60b2ecae6690c2ab5b29207aff2e555f84751943a2a876aa54
-
SHA512
5fccad0f5aa6c970374a4d755821813ecfc287a292d1676a201b838eca345f05212ece744f6ee662285c451aa1a2cba530a8d602beee777bb04ef1b0b362a6fa
-
SSDEEP
24576:N1H2bupaLRxTyNzOoMHGkZuyc2ij8k4hUBAa7sDRlN5ihLc1mW3KOr4RXbqg:N14zXtoux9iMU+L5Fmja4Zbqg
Malware Config
Signatures
Files
-
HEUR-Trojan-Ransom.Win32.Generic-4597137e26d17e60b2ecae6690c2ab5b29207aff2e555f84751943a2a876aa54.dll windows x86
0e589451c51b6d3272ce2bbe4aafce50
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
Sections
Size: 33KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ncfzmrtn Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
doqbvcvz Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE