Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan-Ransom.Win32.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
HEUR-Trojan-Ransom.Win32.exe
Resource
win10v2004-20220901-en
General
-
Target
HEUR-Trojan-Ransom.Win32.Generic-b2268d92fcd7cc6a7edf4811060dc347c117aae5cac78f1eac38ff6ef7aa2c24
-
Size
1.2MB
-
MD5
70527d38ec5510716a99715f688cf7a8
-
SHA1
c7f015a26f67a921c1c5cacd50a143046d261a7c
-
SHA256
b2268d92fcd7cc6a7edf4811060dc347c117aae5cac78f1eac38ff6ef7aa2c24
-
SHA512
35e83e8039f2e967bc5472e1261389cfbbae2892c30746564f0c9dd0f1104c1675dd33ddd3428728c4861bc52da5525a3d4d038892a318e9a46bb1c0499c3f8e
-
SSDEEP
24576:rKtlvaZWFW6aSRk/whSmkBhzLl3mo5/15fO+IinW3Ghf6CZfCAGYxN:2t2EW6Ru/fm0L4oNvOXGhfr/FN
Malware Config
Signatures
Files
-
HEUR-Trojan-Ransom.Win32.Generic-b2268d92fcd7cc6a7edf4811060dc347c117aae5cac78f1eac38ff6ef7aa2c24.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 332KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
egpknvye Size: 892KB - Virtual size: 892KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kaihyhvs Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE