Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Birele.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Birele.exe
Resource
win10v2004-20220901-en
General
-
Target
Trojan-Ransom.Win32.Birele.fcq-7dc119a98403a9abb0be29ad106c5f54a8a35302fc908ba9a7fc73b5dc4a5af2
-
Size
168KB
-
MD5
b1a08c7a7b240df492a95fb945dcf9a9
-
SHA1
63d90bc54eb7bf4083c15df796ba76364fc8c509
-
SHA256
7dc119a98403a9abb0be29ad106c5f54a8a35302fc908ba9a7fc73b5dc4a5af2
-
SHA512
e68d71c3053e0ebe846e6888d107433d2c792a00711327a68374c76d9cbf8ea5405bda4124123754bf9a9f278c5fe62efcd3f01f8a1427690c858d2d32270590
-
SSDEEP
3072:2Ge6HAZY9dhAwMDU0B2Uy6vnd1dcFQlJl4zvT9kQisLASJRMSvGYdO8bsS5bk89C:V9s201dcKyzvWHsASM6GYdtX5bk89C
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Birele.fcq-7dc119a98403a9abb0be29ad106c5f54a8a35302fc908ba9a7fc73b5dc4a5af2.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 12KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE