Trojan-Ransom[.]Win32[.]Blocker[.]dkbw-72fc359adbd74ba8fc1ca882fc3e4d89451de21d12f7d29c8d5cc2e90e03546b

General

Target

Trojan-Ransom.Win32.Blocker.dkbw-72fc359adbd74ba8fc1ca882fc3e4d89451de21d12f7d29c8d5cc2e90e03546b
Size

212KB
MD5

03f6a127cee39dd6ff65c70a1082a083
SHA1

01559dd8c2487442c7982cb1f233d5f76aa687e3
SHA256

72fc359adbd74ba8fc1ca882fc3e4d89451de21d12f7d29c8d5cc2e90e03546b
SHA512

348cb80f766413c7f0ce10fb6d22ad8aef6d81aacfbb5c3f4306141651e2f67a75d249303aec017246591bcb0d72918f5371e68d617e58392c1190ceaa7bfd8e
SSDEEP

6144:yzP+YKg48LMJKP52NESBb/IC8znMPL4+wyi:yLq5nJBbwC8nMT4Mi

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.dkbw-72fc359adbd74ba8fc1ca882fc3e4d89451de21d12f7d29c8d5cc2e90e03546b
.exe windows x86

727288f56f18b4834523e2fa06560fac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetProcessHeap
GetCurrentProcess
lstrlenA
QueryDosDeviceA
MultiByteToWideChar
GetTickCount
GetSystemTimeAsFileTime
FindResourceA
GetCurrentProcessId
LockResource
CloseHandle
GetLocaleInfoA
CreateFileA
HeapAlloc
lstrcmpA
GetLocalTime
GetOEMCP
SetUnhandledExceptionFilter
lstrcpyA
SystemTimeToFileTime
HeapFree
QueryPerformanceCounter
WideCharToMultiByte
GetVolumeInformationA
IsValidLocale
SetLastError

schannel

QuerySecurityPackageInfoW
MakeSignature
QueryContextAttributesA
InitializeSecurityContextW
QuerySecurityPackageInfoA
QueryContextAttributesW

scecli

SceCloseProfile
SceBrowseDatabaseTable
SceAddToNameStatusList
SceAddToObjectList
SceAppendSecurityProfileInfo
SceAnalyzeSystem

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExW

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

727288f56f18b4834523e2fa06560fac

Headers

File Characteristics

Imports

kernel32

schannel

scecli

advapi32

Sections

.text Size: 146KB - Virtual size: 145KB

.rdata Size: 55KB - Virtual size: 54KB

.edata Size: 512B - Virtual size: 512B

.data Size: 5KB - Virtual size: 1.2MB

.rcrc Size: 3KB - Virtual size: 3KB

.text
Size: 146KB - Virtual size: 145KB

.rdata
Size: 55KB - Virtual size: 54KB

.edata
Size: 512B - Virtual size: 512B

.data
Size: 5KB - Virtual size: 1.2MB

.rcrc
Size: 3KB - Virtual size: 3KB