Trojan-Ransom[.]Win32[.]Blocker[.]ecfs-8c9168f29526a38f5ab4563f8bb82a390eff4fd5a826a4d4986e1e6fe679d87f

General

Target

Trojan-Ransom.Win32.Blocker.ecfs-8c9168f29526a38f5ab4563f8bb82a390eff4fd5a826a4d4986e1e6fe679d87f
Size

64KB
MD5

e3af2857178b7ab5a862698ccb5170d0
SHA1

3af6b173e07a124ba5c04ee498901fab87a29674
SHA256

8c9168f29526a38f5ab4563f8bb82a390eff4fd5a826a4d4986e1e6fe679d87f
SHA512

4cc097a4316205c579c84a8a8ab40b23226f033d9591f9185b6659b388a0cdd98dbcbf90c5665d3f754cd57f10cdaa93693bf1c4412339821ab9e25c5f14be9c
SSDEEP

768:CsIoXqaNLCViPkwCBNYLnHKFKYQ5iCY3dctt1gJ+M:CKqaN+2kYKkYQ5icty+M

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.ecfs-8c9168f29526a38f5ab4563f8bb82a390eff4fd5a826a4d4986e1e6fe679d87f
.exe windows x86

4b6e5ff716435afa6a8675fc5ae494c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetProcAddress
LoadLibraryA
GetVersion
VirtualAlloc
GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
CreateFileA
HeapReAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapFree
VirtualFree
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
ReadFile
CloseHandle
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
FlushFileBuffers
GetStringTypeW

user32

MessageBoxA

shell32

SHGetSpecialFolderPathA

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b6e5ff716435afa6a8675fc5ae494c6

Headers

File Characteristics

Imports

kernel32

user32

shell32

wininet

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 12KB - Virtual size: 11KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 12KB - Virtual size: 11KB