Trojan-Ransom[.]Win32[.]Blocker[.]bphu-179ca22ce30f11d386389c916e3bbba6d4eeab0c76267c5b98ad1186cbb4be95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.bphu-179ca22ce30f11d386389c916e3bbba6d4eeab0c76267c5b98ad1186cbb4be95
Size

24KB
MD5

daf341e3fbb8882b7f86ce5843fb0293
SHA1

270b013c1f23beed2a361acf017b19128019088d
SHA256

179ca22ce30f11d386389c916e3bbba6d4eeab0c76267c5b98ad1186cbb4be95
SHA512

6188392f70effb336ae640eb11686d250e5720a8b713608e4f2903aa2d5387186d5e2300bfd954435727976bf6298cd5762114f5af53a2a0488a6fbb8683c547
SSDEEP

192:prtLnroYuDaP0Dq1QkQttqp8npJ6xTGUZ2hzsNsv0Xkajv7WAUEg:1trluIQvtLwGUc8sv00ab7WIg

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.bphu-179ca22ce30f11d386389c916e3bbba6d4eeab0c76267c5b98ad1186cbb4be95
.exe windows x86

fb3ea15c52b7fc2fc9e619e5e75e0d87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord666
ord593
ord594
ord595
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord608
ord716
ProcCallEngine
ord644
ord681
ord576
ord685
ord100
ord689
ord616
ord617
ord619

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ