Trojan-Ransom[.]Win32[.]Blocker[.]dkkd-3bdea486df8d93be0bfcb4abe8434006de92256b1719f8408cf68c18c1a4b7d2

General

Target

Trojan-Ransom.Win32.Blocker.dkkd-3bdea486df8d93be0bfcb4abe8434006de92256b1719f8408cf68c18c1a4b7d2
Size

206KB
MD5

cadecbc06b4a383008b28935a3261808
SHA1

c77705c1be46b5b775e6ff799f156d5f26c8fe15
SHA256

3bdea486df8d93be0bfcb4abe8434006de92256b1719f8408cf68c18c1a4b7d2
SHA512

605343efa44fd3c389b8414fc3bffe8ac549012f0895fcfcff0cb4578eb33097db38a78e6f83981ef64b6cfd9d45d8a2891df514ea66b3a4f284900344699cdc
SSDEEP

6144:bT7X2TSGwEmq6B7ket2nEzvG458rA8/be5E738yf:Pr22IUX0E7G45Oe5Ews

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.dkkd-3bdea486df8d93be0bfcb4abe8434006de92256b1719f8408cf68c18c1a4b7d2
.exe windows x86

3811608d106bc5bdb881254d6131ef83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

scecli

SceAnalyzeSystem
SceBrowseDatabaseTable
SceAddToNameStatusList
SceAddToObjectList
SceCloseProfile
SceAppendSecurityProfileInfo

kernel32

GetVolumeInformationA
lstrcpyA
GetCurrentProcessId
LoadLibraryW
WideCharToMultiByte
FindResourceA
GetLocalTime
GetOEMCP
SetUnhandledExceptionFilter
IsValidLocale
HeapAlloc
SetLastError
GetProcessHeap
GetTickCount
GetCurrentProcess
lstrlenA
GetSystemTimeAsFileTime
GetLocaleInfoA
lstrcmpA
HeapFree
MultiByteToWideChar
CreateFileA
QueryPerformanceCounter
LockResource
SystemTimeToFileTime
CloseHandle

schannel

QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
InitializeSecurityContextW
QueryContextAttributesW
QueryContextAttributesA

advapi32

RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA

Sections

.text
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3811608d106bc5bdb881254d6131ef83

Headers

File Characteristics

Imports

scecli

kernel32

schannel

advapi32

Sections

.text Size: 142KB - Virtual size: 142KB

.rdata Size: 54KB - Virtual size: 54KB

.edata Size: 512B - Virtual size: 512B

.data Size: 3KB - Virtual size: 1.2MB

.rcrc Size: 3KB - Virtual size: 3KB

.text
Size: 142KB - Virtual size: 142KB

.rdata
Size: 54KB - Virtual size: 54KB

.edata
Size: 512B - Virtual size: 512B

.data
Size: 3KB - Virtual size: 1.2MB

.rcrc
Size: 3KB - Virtual size: 3KB