Trojan-Ransom[.]Win32[.]Blocker[.]ileg-8abcd31cd1d7ad7470d32881a333e9560957d15f4b66065ae310997e128fb194 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.ileg-8abcd31cd1d7ad7470d32881a333e9560957d15f4b66065ae310997e128fb194
Size

652KB
MD5

c5ada1e9b89e03e7f3daf1441d7b83f1
SHA1

f9d60fd0f79ed2ef23b815dcab02a738f72c4d95
SHA256

8abcd31cd1d7ad7470d32881a333e9560957d15f4b66065ae310997e128fb194
SHA512

e4ac078f5b042a9cfe6b643814781d78d6d7e1bc65aba7fee48e015591a9f119aac5ed1736208ef3a8f761585c426b0c4c7a60e52bfbeb5e44aede37ebb2df1c
SSDEEP

12288:qln1pflbo4JeJfEuGstTg/kjp98zHpie5:q1HJeJfAZkjp98zHpie

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.ileg-8abcd31cd1d7ad7470d32881a333e9560957d15f4b66065ae310997e128fb194
.exe windows x86

8b882453a4787c640876aa61fa204ce6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
ord552
Zombie_GetTypeInfo
ord592
ord593
ord594
ord595
ord598
ord706
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord716
ord717
ord319
ord533
ProcCallEngine
ord644
ord537
ord681
ord576
ord685
ord578
ord100
ord579
ord610
ord320
ord321
ord616
ord617
ord619
ord542
ord580
ord581

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE