Trojan-Ransom[.]Win32[.]Birele[.]gss-fcb0110af5feb98ec20f6d1eb4e6cce35b3f4f18231d1686782fdfc2ffc53fb6

General

Target

Trojan-Ransom.Win32.Birele.gss-fcb0110af5feb98ec20f6d1eb4e6cce35b3f4f18231d1686782fdfc2ffc53fb6
Size

330KB
MD5

d01e9bb8c75499e5b3ab08f23416e935
SHA1

b405238893942f10f87f84bc13ee14c00c4c99e3
SHA256

fcb0110af5feb98ec20f6d1eb4e6cce35b3f4f18231d1686782fdfc2ffc53fb6
SHA512

2507457486578d3b5e5aa8b215e6b8e6f5ab3ff760ab97e217f579e77f2cc051bdebbaa711d3ee41ae858cd8048191b68fddd6027799d36451b172a4ee0e8497
SSDEEP

6144:C5W4YLvbzTYUmwyc/6aE20MNQghVQdRQP7HfS5RePA7ngwJRQIs99M:0ebzXm5A90MOmgRQjHfUR8A7ng4PAM

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Birele.gss-fcb0110af5feb98ec20f6d1eb4e6cce35b3f4f18231d1686782fdfc2ffc53fb6
.exe windows x86

87c4a589b687466d1e37226f425760aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FreeResource
GetCommandLineA
GetFileAttributesA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
GetTempPathA
GlobalAlloc
GlobalFree
CreateMutexA
LockResource
RtlMoveMemory
SetFileAttributesA
SizeofResource
Sleep
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
CreateFileA
CopyFileA
LoadResource
CloseHandle

user32

SendMessageA
UpdateWindow
RegisterClassExA
LoadCursorA
ShowWindow
LoadIconA
GetMessageA
TranslateMessage
DefWindowProcA
CreateWindowExA
wsprintfA
DispatchMessageA

shlwapi

PathFindExtensionA
PathFindFileNameA

shell32

ShellExecuteA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 324KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

87c4a589b687466d1e37226f425760aa

Headers

File Characteristics

Imports

kernel32

user32

shlwapi

shell32

advapi32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 20KB

.rsrc Size: 324KB - Virtual size: 327KB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 20KB

.rsrc
Size: 324KB - Virtual size: 327KB