Trojan-Ransom[.]Win32[.]Birele[.]ailj-9e65904c933de745611362d0a2889abe2a4fb8191f20c6b0bea23d3107fe2091 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Birele.ailj-9e65904c933de745611362d0a2889abe2a4fb8191f20c6b0bea23d3107fe2091
Size

492KB
MD5

60fdef600f01fa8e91b587791a657eb8
SHA1

dd2ccd3e6a830d48647b52dc5192820b4c486958
SHA256

9e65904c933de745611362d0a2889abe2a4fb8191f20c6b0bea23d3107fe2091
SHA512

17faf3e66e54cc840a2d8d80fc9ffb72373d8b418d6a88f7ba7a6db450f8876587db2dd46dbb60b26a2880f15aed6ddf0092a8fc14f4450c8acc07328e99f400
SSDEEP

12288:VwPOL5dZOMB3TQSWRqHb/xOiVNXqGeQqK7K:60ZRBT8qHrJNXqGcK7

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Birele.ailj-9e65904c933de745611362d0a2889abe2a4fb8191f20c6b0bea23d3107fe2091
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.bss
Size: - Virtual size: 504KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 453KB - Virtual size: 456KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE