Trojan-Ransom[.]Win32[.]Blocker[.]ileg-543a3c8333ddc4ced8d59ce28e65ee627b42bb31368f4c29893b45b244add8a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.ileg-543a3c8333ddc4ced8d59ce28e65ee627b42bb31368f4c29893b45b244add8a8
Size

887KB
MD5

bc0cafdded0ba44d3ee2089102a4c3f3
SHA1

90178d98a03522385714b63bdcfd2e6a041dd1ba
SHA256

543a3c8333ddc4ced8d59ce28e65ee627b42bb31368f4c29893b45b244add8a8
SHA512

fb8b122dd72b6a1d4b24a941114c3a1155ba34a51be333bb1b97c27377968cfca40d82bee8eced23e92897359fb2c4e069ecef9b774343de8ef20126c4698fc0
SSDEEP

24576:O+JbZKXJrr186amIWRVRFyIMX5xv+ZXmRE43sY:O+JbQsJJWRg5X5kxmRR8Y

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.ileg-543a3c8333ddc4ced8d59ce28e65ee627b42bb31368f4c29893b45b244add8a8
.exe windows x86

8b882453a4787c640876aa61fa204ce6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
ord552
Zombie_GetTypeInfo
ord592
ord593
ord594
ord595
ord598
ord706
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord716
ord717
ord319
ord533
ProcCallEngine
ord644
ord537
ord681
ord576
ord685
ord578
ord100
ord579
ord610
ord320
ord321
ord616
ord617
ord619
ord542
ord580
ord581

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE