Trojan-Ransom[.]Win32[.]Blocker[.]dkfh-698a76294baf91be06e10e980cf561fd9d1c7eb0815cf3e39c9aaf8972df0bff

General

Target

Trojan-Ransom.Win32.Blocker.dkfh-698a76294baf91be06e10e980cf561fd9d1c7eb0815cf3e39c9aaf8972df0bff
Size

206KB
MD5

2c0731df9b0e79aa61a7841173355a8d
SHA1

921e58efe164767b4e712c53fac22baecfcbf4d1
SHA256

698a76294baf91be06e10e980cf561fd9d1c7eb0815cf3e39c9aaf8972df0bff
SHA512

0c21953babd0d4ab523021ff8f9bf75f6a611c3263a18ef77a484b144c9c87a587c2dedcfa355b213f54f40cc081fdf35910ef8d3faaf4d6803e6d626d42d2d5
SSDEEP

6144:wczIyhH/NrZbZia5B0qsyiWXxYWJIDSiO:LHlrJwkBFLxYWZiO

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.dkfh-698a76294baf91be06e10e980cf561fd9d1c7eb0815cf3e39c9aaf8972df0bff
.exe windows x86

cd0b29dabdb2fa1e5851e1e7a7fda9ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetOEMCP
HeapAlloc
SetLastError
lstrcpyA
GetCurrentProcess
GetTickCount
lstrlenA
QueryPerformanceCounter
LockResource
LoadLibraryW
GetCurrentProcessId
WideCharToMultiByte
lstrcmpA
CreateFileA
GetProcessHeap
HeapFree
MultiByteToWideChar
IsValidLocale
GetVolumeInformationA
SetUnhandledExceptionFilter
GetLocalTime
GetLocaleInfoA
FindResourceA
SystemTimeToFileTime
GetSystemTimeAsFileTime

schannel

QueryContextAttributesW
InitializeSecurityContextW
QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
QueryContextAttributesA

scecli

SceAddToObjectList
SceAppendSecurityProfileInfo
SceCloseProfile
SceBrowseDatabaseTable
SceAnalyzeSystem
SceAddToNameStatusList

advapi32

RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExA

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd0b29dabdb2fa1e5851e1e7a7fda9ae

Headers

File Characteristics

Imports

kernel32

schannel

scecli

advapi32

Sections

.text Size: 143KB - Virtual size: 142KB

.rdata Size: 54KB - Virtual size: 54KB

.edata Size: 512B - Virtual size: 512B

.data Size: 3KB - Virtual size: 1.2MB

.rcrc Size: 3KB - Virtual size: 3KB

.text
Size: 143KB - Virtual size: 142KB

.rdata
Size: 54KB - Virtual size: 54KB

.edata
Size: 512B - Virtual size: 512B

.data
Size: 3KB - Virtual size: 1.2MB

.rcrc
Size: 3KB - Virtual size: 3KB