Trojan-Ransom[.]Win32[.]Blocker[.]dkfh-13eb6e36241f1eb13962cb66a1801329ee21278056a6a302a0310eaeff4a03dc

General

Target

Trojan-Ransom.Win32.Blocker.dkfh-13eb6e36241f1eb13962cb66a1801329ee21278056a6a302a0310eaeff4a03dc
Size

206KB
MD5

135de3118887270e76d70a3b1fd098a0
SHA1

65bd3207712fda66ef43b45f3cc003ec811953fc
SHA256

13eb6e36241f1eb13962cb66a1801329ee21278056a6a302a0310eaeff4a03dc
SHA512

ec8828a6d5d816e788179eb6126f8ff3d2b5a4897a09e844101d0d8e9e30d9e00294d02e5b9948f377302b633e8eee2c16458b6643cadd62dcf88fb208d22f1e
SSDEEP

6144:wczIyhH/NrZbZia5B0qsyiWXxYWJIDSiy:LHlrJwkBFLxYWZiy

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.dkfh-13eb6e36241f1eb13962cb66a1801329ee21278056a6a302a0310eaeff4a03dc
.exe windows x86

cd0b29dabdb2fa1e5851e1e7a7fda9ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetOEMCP
HeapAlloc
SetLastError
lstrcpyA
GetCurrentProcess
GetTickCount
lstrlenA
QueryPerformanceCounter
LockResource
LoadLibraryW
GetCurrentProcessId
WideCharToMultiByte
lstrcmpA
CreateFileA
GetProcessHeap
HeapFree
MultiByteToWideChar
IsValidLocale
GetVolumeInformationA
SetUnhandledExceptionFilter
GetLocalTime
GetLocaleInfoA
FindResourceA
SystemTimeToFileTime
GetSystemTimeAsFileTime

schannel

QueryContextAttributesW
InitializeSecurityContextW
QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
QueryContextAttributesA

scecli

SceAddToObjectList
SceAppendSecurityProfileInfo
SceCloseProfile
SceBrowseDatabaseTable
SceAnalyzeSystem
SceAddToNameStatusList

advapi32

RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExA

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd0b29dabdb2fa1e5851e1e7a7fda9ae

Headers

File Characteristics

Imports

kernel32

schannel

scecli

advapi32

Sections

.text Size: 143KB - Virtual size: 142KB

.rdata Size: 54KB - Virtual size: 54KB

.edata Size: 512B - Virtual size: 512B

.data Size: 3KB - Virtual size: 1.2MB

.rcrc Size: 3KB - Virtual size: 3KB

.text
Size: 143KB - Virtual size: 142KB

.rdata
Size: 54KB - Virtual size: 54KB

.edata
Size: 512B - Virtual size: 512B

.data
Size: 3KB - Virtual size: 1.2MB

.rcrc
Size: 3KB - Virtual size: 3KB