Trojan-Ransom[.]Win32[.]Blocker[.]dkfh-a2ef2cb03c98ee830f5b6c6a5b95ca88bb23e6038944274804269866e3d9e8e0

General

Target

Trojan-Ransom.Win32.Blocker.dkfh-a2ef2cb03c98ee830f5b6c6a5b95ca88bb23e6038944274804269866e3d9e8e0
Size

206KB
MD5

004f7891ac71c7909d001301abadc1d2
SHA1

7bf82111e150d7382b90dc964af213e33b3c0340
SHA256

a2ef2cb03c98ee830f5b6c6a5b95ca88bb23e6038944274804269866e3d9e8e0
SHA512

34f47a47919ba7e020020108f7e61b5801821a2feac877c8829717ed0d1d0da6397777ad950453c9f9d2f68880ef828af644ab89bb4587e1e8588b780bb0e497
SSDEEP

6144:wczIyhH/NrZbZia5B0qsyiWXxYWJIDSiM:LHlrJwkBFLxYWZiM

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.dkfh-a2ef2cb03c98ee830f5b6c6a5b95ca88bb23e6038944274804269866e3d9e8e0
.exe windows x86

cd0b29dabdb2fa1e5851e1e7a7fda9ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetOEMCP
HeapAlloc
SetLastError
lstrcpyA
GetCurrentProcess
GetTickCount
lstrlenA
QueryPerformanceCounter
LockResource
LoadLibraryW
GetCurrentProcessId
WideCharToMultiByte
lstrcmpA
CreateFileA
GetProcessHeap
HeapFree
MultiByteToWideChar
IsValidLocale
GetVolumeInformationA
SetUnhandledExceptionFilter
GetLocalTime
GetLocaleInfoA
FindResourceA
SystemTimeToFileTime
GetSystemTimeAsFileTime

schannel

QueryContextAttributesW
InitializeSecurityContextW
QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
QueryContextAttributesA

scecli

SceAddToObjectList
SceAppendSecurityProfileInfo
SceCloseProfile
SceBrowseDatabaseTable
SceAnalyzeSystem
SceAddToNameStatusList

advapi32

RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExA

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd0b29dabdb2fa1e5851e1e7a7fda9ae

Headers

File Characteristics

Imports

kernel32

schannel

scecli

advapi32

Sections

.text Size: 143KB - Virtual size: 142KB

.rdata Size: 54KB - Virtual size: 54KB

.edata Size: 512B - Virtual size: 512B

.data Size: 3KB - Virtual size: 1.2MB

.rcrc Size: 3KB - Virtual size: 3KB

.text
Size: 143KB - Virtual size: 142KB

.rdata
Size: 54KB - Virtual size: 54KB

.edata
Size: 512B - Virtual size: 512B

.data
Size: 3KB - Virtual size: 1.2MB

.rcrc
Size: 3KB - Virtual size: 3KB