Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Birele.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Birele.exe
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Birele.zij-481e80c3f83d60a21415311c7246cc1e853ec84606d6968146212fd8fcc386f7
-
Size
188KB
-
MD5
24d5474411cade41513e60b2e026c81d
-
SHA1
915ace91c8d45756222f34747b357d91fcc66cf4
-
SHA256
481e80c3f83d60a21415311c7246cc1e853ec84606d6968146212fd8fcc386f7
-
SHA512
b5c7c673f6cb22c24063f1850f547e86fe598772db83146d06bafb5d51f7b7b80ecee237560832f68ef82ced5667e7901a68508fd79433875a3a0819bc9fe14a
-
SSDEEP
3072:R6TybPloJlOoQfwey/sT9GUYOlFtnysxFEeJGLJ1oGo+M1SIB9EF:MTybPlClOoQFv9GJutysx2eYFNs1VB9
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Birele.zij-481e80c3f83d60a21415311c7246cc1e853ec84606d6968146212fd8fcc386f7.exe windows x86
3cfb418a0322148619c2ec2c596acd4f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetWindowOrgEx
SetBitmapBits
CreateFontIndirectA
CreateRectRgn
GetTextExtentPointA
GetSystemPaletteEntries
SetAbortProc
DeleteObject
CreateDiscardableBitmap
SetViewportExtEx
EndPage
kernel32
GetSystemDirectoryA
SetHandleCount
GetPriorityClass
AddAtomA
GetSystemWindowsDirectoryW
GetBinaryTypeW
LeaveCriticalSection
GetShortPathNameA
FindClose
ClearCommBreak
CreateThread
CreateFileW
SystemTimeToFileTime
GetExitCodeThread
CreateFileA
Sections
.text Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ