Trojan-Ransom[.]Win32[.]Blocker[.]dafn-bf9bf9551925f3aabae968caf0fc2437daa043a009f2f77cb838e59df44dd05f

Sharing

Copy URL

Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.dafn-bf9bf9551925f3aabae968caf0fc2437daa043a009f2f77cb838e59df44dd05f
Size

184KB
MD5

92b3937aa231c763e69909f8597e981a
SHA1

56592dba684b9f9a971ae4b490d5945a1c59a6b7
SHA256

bf9bf9551925f3aabae968caf0fc2437daa043a009f2f77cb838e59df44dd05f
SHA512

4226307f75ef291d652a155fd76ee4ac0316217ab1010e2987c5f6e8722a34395c1692503753eb613be5d2fcd530cd12dc32577365d160333671a0b1f25877cc
SSDEEP

3072:OMoe4nMnj8h+lXeqvlMTKKGbZp6pi9fKyl38SDOJmXlElZ7EX0omoQNHK7lI/TqI:OiEMG+9XJKG9UpiBl3XGUuIPY06fRklk

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.dafn-bf9bf9551925f3aabae968caf0fc2437daa043a009f2f77cb838e59df44dd05f
.exe windows x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

CODE
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ye.ealgd
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

q5rl.p1y
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pelk3476
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

l5s3.zxo
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jwp2ui0y
Size: 174KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3nk0vpo7
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f433e7fcc51e68080022754836705744

Headers

File Characteristics

Imports

kernel32

user32

Sections

CODE Size: - Virtual size: 16KB

DATA Size: - Virtual size: 4KB

BSS Size: - Virtual size: 4KB

ye.ealgd Size: - Virtual size: 4KB

.tls Size: - Virtual size: 4KB

.rdata Size: - Virtual size: 4KB

q5rl.p1y Size: - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 136KB

pelk3476 Size: - Virtual size: 4KB

l5s3.zxo Size: - Virtual size: 48KB

jwp2ui0y Size: 174KB - Virtual size: 176KB

3nk0vpo7 Size: 512B - Virtual size: 4KB

CODE
Size: - Virtual size: 16KB

DATA
Size: - Virtual size: 4KB

BSS
Size: - Virtual size: 4KB

ye.ealgd
Size: - Virtual size: 4KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: - Virtual size: 4KB

q5rl.p1y
Size: - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 136KB

pelk3476
Size: - Virtual size: 4KB

l5s3.zxo
Size: - Virtual size: 48KB

jwp2ui0y
Size: 174KB - Virtual size: 176KB

3nk0vpo7
Size: 512B - Virtual size: 4KB