Trojan-Ransom[.]Win32[.]Blocker[.]dkkd-008aa8ed89c1f3aca803c7efa544d43fe6e54bd4cd046699e6fa9f2a8f5eab91

General

Target

Trojan-Ransom.Win32.Blocker.dkkd-008aa8ed89c1f3aca803c7efa544d43fe6e54bd4cd046699e6fa9f2a8f5eab91
Size

206KB
MD5

659c10a1cbe6a4d810a977717d31e943
SHA1

112e3c93aced6789f8b0678e6f4f5cef13f9a7a8
SHA256

008aa8ed89c1f3aca803c7efa544d43fe6e54bd4cd046699e6fa9f2a8f5eab91
SHA512

6de98dd60df5e5de3a6e4e71b77644517c673f0fd3de4ba5b5d6fb2814e4821e1d82bba52821f285c713b8202b114a06098943a89ce29b497e797907aaaa80da
SSDEEP

6144:bT7X2TSGwEmq6B7ket2nEzvG458rA8/be5E738y2:Pr22IUX0E7G45Oe5Ewx

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.dkkd-008aa8ed89c1f3aca803c7efa544d43fe6e54bd4cd046699e6fa9f2a8f5eab91
.exe windows x86

3811608d106bc5bdb881254d6131ef83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

scecli

SceAnalyzeSystem
SceBrowseDatabaseTable
SceAddToNameStatusList
SceAddToObjectList
SceCloseProfile
SceAppendSecurityProfileInfo

kernel32

GetVolumeInformationA
lstrcpyA
GetCurrentProcessId
LoadLibraryW
WideCharToMultiByte
FindResourceA
GetLocalTime
GetOEMCP
SetUnhandledExceptionFilter
IsValidLocale
HeapAlloc
SetLastError
GetProcessHeap
GetTickCount
GetCurrentProcess
lstrlenA
GetSystemTimeAsFileTime
GetLocaleInfoA
lstrcmpA
HeapFree
MultiByteToWideChar
CreateFileA
QueryPerformanceCounter
LockResource
SystemTimeToFileTime
CloseHandle

schannel

QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
InitializeSecurityContextW
QueryContextAttributesW
QueryContextAttributesA

advapi32

RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA

Sections

.text
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3811608d106bc5bdb881254d6131ef83

Headers

File Characteristics

Imports

scecli

kernel32

schannel

advapi32

Sections

.text Size: 142KB - Virtual size: 142KB

.rdata Size: 54KB - Virtual size: 54KB

.edata Size: 512B - Virtual size: 512B

.data Size: 3KB - Virtual size: 1.2MB

.rcrc Size: 3KB - Virtual size: 3KB

.text
Size: 142KB - Virtual size: 142KB

.rdata
Size: 54KB - Virtual size: 54KB

.edata
Size: 512B - Virtual size: 512B

.data
Size: 3KB - Virtual size: 1.2MB

.rcrc
Size: 3KB - Virtual size: 3KB