Trojan-Ransom[.]Win32[.]Blocker[.]dkfh-7ed4a7d9715e557a441c031d1d0c486c38e6593f923ae3f343af7b75c0d47bdf

General

Target

Trojan-Ransom.Win32.Blocker.dkfh-7ed4a7d9715e557a441c031d1d0c486c38e6593f923ae3f343af7b75c0d47bdf
Size

206KB
MD5

03b0dbab78812850ca6f25b101ce6c92
SHA1

c67761a78d52655b9b0a68871b00403499103039
SHA256

7ed4a7d9715e557a441c031d1d0c486c38e6593f923ae3f343af7b75c0d47bdf
SHA512

eb1f8d58b26fc9cad6ba44f39eef616a370b2e9d3bf961d4a3dc2586ccb7bbc4ddcad55d103b26b110a4d8b5aaf072e4122922127fde790179e2dd4afcee6257
SSDEEP

6144:wczIyhH/NrZbZia5B0qsyiWXxYWJIDSih:LHlrJwkBFLxYWZih

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.dkfh-7ed4a7d9715e557a441c031d1d0c486c38e6593f923ae3f343af7b75c0d47bdf
.exe windows x86

cd0b29dabdb2fa1e5851e1e7a7fda9ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetOEMCP
HeapAlloc
SetLastError
lstrcpyA
GetCurrentProcess
GetTickCount
lstrlenA
QueryPerformanceCounter
LockResource
LoadLibraryW
GetCurrentProcessId
WideCharToMultiByte
lstrcmpA
CreateFileA
GetProcessHeap
HeapFree
MultiByteToWideChar
IsValidLocale
GetVolumeInformationA
SetUnhandledExceptionFilter
GetLocalTime
GetLocaleInfoA
FindResourceA
SystemTimeToFileTime
GetSystemTimeAsFileTime

schannel

QueryContextAttributesW
InitializeSecurityContextW
QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
QueryContextAttributesA

scecli

SceAddToObjectList
SceAppendSecurityProfileInfo
SceCloseProfile
SceBrowseDatabaseTable
SceAnalyzeSystem
SceAddToNameStatusList

advapi32

RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExA

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd0b29dabdb2fa1e5851e1e7a7fda9ae

Headers

File Characteristics

Imports

kernel32

schannel

scecli

advapi32

Sections

.text Size: 143KB - Virtual size: 142KB

.rdata Size: 54KB - Virtual size: 54KB

.edata Size: 512B - Virtual size: 512B

.data Size: 3KB - Virtual size: 1.2MB

.rcrc Size: 3KB - Virtual size: 3KB

.text
Size: 143KB - Virtual size: 142KB

.rdata
Size: 54KB - Virtual size: 54KB

.edata
Size: 512B - Virtual size: 512B

.data
Size: 3KB - Virtual size: 1.2MB

.rcrc
Size: 3KB - Virtual size: 3KB