Trojan-Ransom[.]Win32[.]Birele[.]jk-955d6df5cd24e465077b54742ec1b91c2e93343d4c214c6860b6fa72defce6cf

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Birele.jk-955d6df5cd24e465077b54742ec1b91c2e93343d4c214c6860b6fa72defce6cf
Size

80KB
MD5

e5f05e2f68ba9cd370901cb6248caa5e
SHA1

c47e44ec25f2b2cdf457c1e553b2f56cf5a27f71
SHA256

955d6df5cd24e465077b54742ec1b91c2e93343d4c214c6860b6fa72defce6cf
SHA512

9a2e990d205bb97c80668640a6013e2b90d52e6162ca69bb1e06acf58ed587b7386d1a215dacf825dc9fe8551a19dfe627024d0f242fb290d84e23d13b6b9185
SSDEEP

1536:5ii2rat+5XKLXOFgcA8NiPqP6My0/AHGdG1Jh:5sraQXQOFgkNiMy0/Tw1Jh

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Birele.jk-955d6df5cd24e465077b54742ec1b91c2e93343d4c214c6860b6fa72defce6cf
.dll windows x86

e6e00f4c0d58cc356384192ab7a38e0a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
lstrlenW
LCMapStringA
CreateFileA
UnmapViewOfFile
WaitForSingleObject
LocalFree
IsDBCSLeadByte
DeleteFileA
VirtualProtect
CreateMutexA
VirtualAlloc
GetStringTypeW
MultiByteToWideChar
HeapDestroy
SetFileTime
TlsAlloc
WriteFile
CreateFileW
SetHandleCount
CreateFileMappingW
MapViewOfFile
FreeEnvironmentStringsW
DisableThreadLibraryCalls
GetTickCount
GetStartupInfoA
GetSystemTimeAsFileTime
Sleep
OpenFileMappingA
VirtualFree
InitializeCriticalSectionAndSpinCount
GetFileSize
CloseHandle
HeapCreate
GetFullPathNameW
TerminateProcess
GetACP
GetStringTypeExA
QueryPerformanceCounter
DeleteFileW
lstrcmpA
InterlockedDecrement
HeapFree
FlushViewOfFile
WideCharToMultiByte
CreateMutexW
MoveFileA
GetEnvironmentVariableA
VirtualQuery
UnhandledExceptionFilter
HeapReAlloc
GetCurrentProcess
GetDiskFreeSpaceW
GetVersionExA
GetLastError
GetStdHandle
InitializeCriticalSection
InterlockedIncrement
GetFullPathNameA
OpenFileMappingW
TlsFree
GetCPInfo
GetSystemInfo
TlsGetValue
GetCurrentProcessId
ReleaseMutex
GetCurrentThreadId
GetProcAddress
FreeEnvironmentStringsA
GetLocaleInfoA
MoveFileW
IsBadReadPtr
SetFilePointer
GetEnvironmentStrings
LeaveCriticalSection
GetOEMCP
HeapAlloc
lstrlenA
CreateFileMappingA
GetFileType
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetDiskFreeSpaceA
InterlockedExchange
DeleteCriticalSection
lstrcmpiA
CreateThread
EnterCriticalSection
CompareFileTime
SetEvent
SetEndOfFile
LocalAlloc
FreeLibrary
LoadLibraryA
CreateEventA
SetLastError
MoveFileWithProgressA

Exports

Exports

rgdh

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6e00f4c0d58cc356384192ab7a38e0a

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 36KB

.data Size: 20KB - Virtual size: 16KB

.rsrc Size: 12KB - Virtual size: 8KB

.reloc Size: 4KB - Virtual size: 562B

.text
Size: 40KB - Virtual size: 36KB

.data
Size: 20KB - Virtual size: 16KB

.rsrc
Size: 12KB - Virtual size: 8KB

.reloc
Size: 4KB - Virtual size: 562B