Trojan-Ransom[.]Win32[.]Blocker[.]akhz-dd6564486ef732e585b3e233ec19eadaafa664a8535f571a6600f1a3e725909d

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.akhz-dd6564486ef732e585b3e233ec19eadaafa664a8535f571a6600f1a3e725909d
Size

256KB
MD5

2b7cd6ea687a472b1f5b2da4eec2324e
SHA1

54dc231ccd4ff8916295558a8e9f67b0c6458897
SHA256

dd6564486ef732e585b3e233ec19eadaafa664a8535f571a6600f1a3e725909d
SHA512

2c7e275751cb8b42603cb5ee593c6eefdc2c7d03f2a21fc1c61b154614260652fcc936ae52870caab4045b2c71322b98c0fdecf3007b27f10e7776c3a336f4de
SSDEEP

3072:MPxf6+2EQMPVkov48wE+wzvtm+nli+EEVbHAWvXBnyuMr9IhKeoYLdbDTHEeYDL+:M5WMPmoA8jTtnEoc0ybFedbnwDL5RV

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.akhz-dd6564486ef732e585b3e233ec19eadaafa664a8535f571a6600f1a3e725909d
.exe windows x86

69c7ec1fdc0450a10434e20776a00f83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToSystemTime
FileTimeToLocalFileTime
GetTickCount
FormatMessageW
GetStartupInfoW
ExitProcess
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
TerminateProcess
RaiseException
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetErrorMode
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
SetStdHandle
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetFileTime
GetFileSize
GetFileAttributesW
GetProcessVersion
WritePrivateProfileStringW
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
MulDiv
lstrcmpiW
GetThreadLocale
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetCurrentProcess
DuplicateHandle
lstrcpynW
GetLastError
SetLastError
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
LoadLibraryA
FreeLibrary
lstrlenA
MultiByteToWideChar
GetVersion
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
lstrcpyW
GetModuleHandleW
GetProcAddress
GlobalUnlock
GlobalFree
LockResource
FindResourceW
LoadResource
CloseHandle
GlobalLock
lstrcmpW
GlobalAlloc
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
UpdateResourceW
EndUpdateResourceW
GetModuleFileNameW
lstrlenW
WideCharToMultiByte
Sleep
GetProcessHeap
HeapAlloc
GetModuleFileNameA
HeapFree

user32

GetSysColorBrush
CharNextW
CopyAcceleratorTableW
SetRect
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatW
PostThreadMessageW
GetDesktopWindow
LoadCursorW
GrayStringW
DrawTextW
TabbedTextOutW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
CharUpperW
DestroyMenu
LoadStringW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetWindowTextW
GetDlgCtrlID
CreateWindowExW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongW
RegisterWindowMessageW
OffsetRect
SystemParametersInfoW
GetWindowPlacement
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageW
PtInRect
GetClassNameW
TranslateMessage
DispatchMessageW
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageW
GetCursorPos
SetWindowsHookExW
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongW
MessageBoxW
SetCursor
PostQuitMessage
EnableWindow
wsprintfW
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuW
SendMessageW
PostMessageW
SetTimer
GetWindowRect
LoadIconW
GetMenuItemID
UnregisterClassW

gdi32

GetWindowExtEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
GetTextColor
GetViewportExtEx
DPtoLP
LPtoDP
GetMapMode
GetDeviceCaps
DeleteObject
GetBkColor
CreateBitmap
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectW
SetBkColor
SetTextColor
GetClipBox

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey

comctl32

ord17

oledlg

OleUIBusyW

ole32

CoFreeUnusedLibraries
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
OleInitialize

olepro32

ord253

oleaut32

SysStringLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69c7ec1fdc0450a10434e20776a00f83

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 128KB - Virtual size: 126KB

.rdata Size: 36KB - Virtual size: 34KB

.data Size: 20KB - Virtual size: 31KB

.rsrc Size: 68KB - Virtual size: 65KB

.text
Size: 128KB - Virtual size: 126KB

.rdata
Size: 36KB - Virtual size: 34KB

.data
Size: 20KB - Virtual size: 31KB

.rsrc
Size: 68KB - Virtual size: 65KB