Trojan-Ransom[.]Win32[.]Blocker[.]edai-0ffa8bd2b3df3f363e0dec86775bf623bc7f3ce05f7bb0b70cb7145d0fa04868 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.edai-0ffa8bd2b3df3f363e0dec86775bf623bc7f3ce05f7bb0b70cb7145d0fa04868
Size

412KB
MD5

67a65f7f3b8ee41f5c0d340759350d31
SHA1

87850a2fdef707c45d40a6e215fd49032bc09131
SHA256

0ffa8bd2b3df3f363e0dec86775bf623bc7f3ce05f7bb0b70cb7145d0fa04868
SHA512

76224e6f5e91eae1666292b85e7e132a90bfef3fdedb973aed9e1a566d926ee1e07bce3d4e6b9c89f286ddfdd8bcd9cdef28d6fa537f8f8eff922b6ab7b1ba41
SSDEEP

3072:e52p24Wllz11DCX6zdW2URzHC/8vANOyMmZZd8CnqizVCXpi1Edm2q7+ZGG9FrQC:HZip11DCX6hTnzVCXpii4GzrZHKgk

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.edai-0ffa8bd2b3df3f363e0dec86775bf623bc7f3ce05f7bb0b70cb7145d0fa04868
.exe windows x86

6ee65ef5dc6b6a2db32b2209dbfdf338

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord717
ProcCallEngine
ord537
ord644
ord572
ord100
ord616
ord618

Sections

.text
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ