Trojan-Ransom[.]Win32[.]Blocker[.]dkfh-5a1506f12fca71592b3a7a4ed9e13a16ff00e11a86a330aa988b77e379ee014c

General

Target

Trojan-Ransom.Win32.Blocker.dkfh-5a1506f12fca71592b3a7a4ed9e13a16ff00e11a86a330aa988b77e379ee014c
Size

206KB
MD5

0f79ceb2c89d3473ba68ed6c81da09ef
SHA1

6a8452a5c17a1956e56ed0696a31a36593398415
SHA256

5a1506f12fca71592b3a7a4ed9e13a16ff00e11a86a330aa988b77e379ee014c
SHA512

d257f8da3c45b2beaddb13fb7dd68d0e367af9ccf9b6516cc4d7194152dd4e7d568d5f32b3f2c3416cd6ce89e1ce2fa84dd7c9c2b9a89412734a0f719b39b54a
SSDEEP

6144:wczIyhH/NrZbZia5B0qsyiWXxYWJIDSiO:LHlrJwkBFLxYWZiO

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.dkfh-5a1506f12fca71592b3a7a4ed9e13a16ff00e11a86a330aa988b77e379ee014c
.exe windows x86

cd0b29dabdb2fa1e5851e1e7a7fda9ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetOEMCP
HeapAlloc
SetLastError
lstrcpyA
GetCurrentProcess
GetTickCount
lstrlenA
QueryPerformanceCounter
LockResource
LoadLibraryW
GetCurrentProcessId
WideCharToMultiByte
lstrcmpA
CreateFileA
GetProcessHeap
HeapFree
MultiByteToWideChar
IsValidLocale
GetVolumeInformationA
SetUnhandledExceptionFilter
GetLocalTime
GetLocaleInfoA
FindResourceA
SystemTimeToFileTime
GetSystemTimeAsFileTime

schannel

QueryContextAttributesW
InitializeSecurityContextW
QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
QueryContextAttributesA

scecli

SceAddToObjectList
SceAppendSecurityProfileInfo
SceCloseProfile
SceBrowseDatabaseTable
SceAnalyzeSystem
SceAddToNameStatusList

advapi32

RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExA

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd0b29dabdb2fa1e5851e1e7a7fda9ae

Headers

File Characteristics

Imports

kernel32

schannel

scecli

advapi32

Sections

.text Size: 143KB - Virtual size: 142KB

.rdata Size: 54KB - Virtual size: 54KB

.edata Size: 512B - Virtual size: 512B

.data Size: 3KB - Virtual size: 1.2MB

.rcrc Size: 3KB - Virtual size: 3KB

.text
Size: 143KB - Virtual size: 142KB

.rdata
Size: 54KB - Virtual size: 54KB

.edata
Size: 512B - Virtual size: 512B

.data
Size: 3KB - Virtual size: 1.2MB

.rcrc
Size: 3KB - Virtual size: 3KB