Trojan-Ransom[.]Win32[.]Blocker[.]eluf-e2961ba28a3cc3f00c6c747911fbefc4801967436b0446f43c9f1eecbc7a1084

General

Target

Trojan-Ransom.Win32.Blocker.eluf-e2961ba28a3cc3f00c6c747911fbefc4801967436b0446f43c9f1eecbc7a1084
Size

305KB
MD5

f448d257058e9f1eb44ae300dffafd24
SHA1

e7ab910aa9793b8598000fe4cdb2a4043aeeaad7
SHA256

e2961ba28a3cc3f00c6c747911fbefc4801967436b0446f43c9f1eecbc7a1084
SHA512

89b025ffa22592e32f4e28b9753f1e5437629c81b41e4739bda7bc9db99b88fac201d95cc565edf7ff8e541722ebf6f685aa19dfc84eb13f9079b2a86553b34c
SSDEEP

6144:gNuN0ov+YgUywIG6DXUL3QPZ42YOLSY3Dz02F84vYvGhVhjyloRf5HrC3u01S8:gNufvZzywR6TU6ZSOL1Dzf1vYQWlyhLM

Score

N/A

Trojan-Ransom.Win32.Blocker.eluf-e2961ba28a3cc3f00c6c747911fbefc4801967436b0446f43c9f1eecbc7a1084
.rar
proposta.exe
.exe windows x86

a0ab5fc53584b2bb39fb6b53f727901d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord588
MethCallEngine
ord516
ord519
ord660
ord593
ord594
ord595
ord598
ord520
ord524
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
DllFunctionCall
ord670
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord714
ord608
ord716
ord717
ord534
ProcCallEngine
ord535
ord536
ord537
ord644
ord645
ord570
ord648
ord571
ord578
ord100
ord689
ord610
ord612
ord613
ord617
ord618
ord619
ord581

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ