_PostQuitMessagePostQuitMessagePostQuitMessagePostQuitMessage@0
Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Birele.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Birele.dll
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Birele.acxs-8c6099d4f4f60cb66d8778a8a2ff858f59cc999c77e338add16a5640095b2ae5
-
Size
196KB
-
MD5
32a872fdcbd8b7582ce6927c0fb00963
-
SHA1
19c0acac55143c9cbf66a2c1a3edbc36b1f14679
-
SHA256
8c6099d4f4f60cb66d8778a8a2ff858f59cc999c77e338add16a5640095b2ae5
-
SHA512
958f4e72c99c40b6623dd4134ec8e71554a6d5161dc707a05d703038f00f2fe9405390682a7342ff1b0b604c931fcf21608e031ee3202d568d0347e3dbbab98b
-
SSDEEP
6144:UL/i59zTTKcEGcNnw7jr8wg6TCTi6IzG:Ci59zTTKc+hw7jr8wg6TCTi6IzG
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Birele.acxs-8c6099d4f4f60cb66d8778a8a2ff858f59cc999c77e338add16a5640095b2ae5.dll windows x86
f9adfb3ba9cabb18a9b3c665d46670cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleBuildVersion
shlwapi
PathFileExistsA
user32
HideCaret
GetDlgCtrlID
OpenIcon
GetSysColor
GetIconInfo
IsWindowEnabled
SetCursor
AppendMenuW
kernel32
CreateNamedPipeW
lstrlenA
EnterCriticalSection
DeleteAtom
LeaveCriticalSection
GetTimeFormatW
lstrcpynW
lstrlenW
msvcrt
exit
iswalpha
localtime
time
strcspn
strtol
Exports
Exports
Sections
.vgfdg Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.cfvgg Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.erre Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dfrer Size: 1024B - Virtual size: 574B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ