Trojan-Ransom[.]Win32[.]Blocker[.]dkbw-3c820d55aebfb6c627fa88391db88266a51880f9f5a392cafafbf0d6228a0807

General

Target

Trojan-Ransom.Win32.Blocker.dkbw-3c820d55aebfb6c627fa88391db88266a51880f9f5a392cafafbf0d6228a0807
Size

212KB
MD5

03b7e951e5efe3c8f5b686deb588b013
SHA1

186a4feed361371c07f14b0887456754c56a4400
SHA256

3c820d55aebfb6c627fa88391db88266a51880f9f5a392cafafbf0d6228a0807
SHA512

f228366b2ae7309ce7dc44ed178d268a1472afdfe6e67bfc7931e1239b16e1a83296aee6a0b75273a0ec9b9ccc0ff1a543e1a4fff57e3511ddfeb2ff6f758c5d
SSDEEP

6144:yzP+YKg48LMJKP52NESBb/IC8znMPL4+wg1:yLq5nJBbwC8nMT4+1

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.dkbw-3c820d55aebfb6c627fa88391db88266a51880f9f5a392cafafbf0d6228a0807
.exe windows x86

727288f56f18b4834523e2fa06560fac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetProcessHeap
GetCurrentProcess
lstrlenA
QueryDosDeviceA
MultiByteToWideChar
GetTickCount
GetSystemTimeAsFileTime
FindResourceA
GetCurrentProcessId
LockResource
CloseHandle
GetLocaleInfoA
CreateFileA
HeapAlloc
lstrcmpA
GetLocalTime
GetOEMCP
SetUnhandledExceptionFilter
lstrcpyA
SystemTimeToFileTime
HeapFree
QueryPerformanceCounter
WideCharToMultiByte
GetVolumeInformationA
IsValidLocale
SetLastError

schannel

QuerySecurityPackageInfoW
MakeSignature
QueryContextAttributesA
InitializeSecurityContextW
QuerySecurityPackageInfoA
QueryContextAttributesW

scecli

SceCloseProfile
SceBrowseDatabaseTable
SceAddToNameStatusList
SceAddToObjectList
SceAppendSecurityProfileInfo
SceAnalyzeSystem

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExW

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

727288f56f18b4834523e2fa06560fac

Headers

File Characteristics

Imports

kernel32

schannel

scecli

advapi32

Sections

.text Size: 146KB - Virtual size: 145KB

.rdata Size: 55KB - Virtual size: 54KB

.edata Size: 512B - Virtual size: 512B

.data Size: 5KB - Virtual size: 1.2MB

.rcrc Size: 3KB - Virtual size: 3KB

.text
Size: 146KB - Virtual size: 145KB

.rdata
Size: 55KB - Virtual size: 54KB

.edata
Size: 512B - Virtual size: 512B

.data
Size: 5KB - Virtual size: 1.2MB

.rcrc
Size: 3KB - Virtual size: 3KB