Trojan-Ransom[.]Win32[.]Blocker[.]ileg-be609d7ca618283bd1e9aa9fa540afd1d8f3898eef1e2bf92647c7868241758b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.ileg-be609d7ca618283bd1e9aa9fa540afd1d8f3898eef1e2bf92647c7868241758b
Size

264KB
MD5

a672b23abdf240ba848ad0f353a9a6c6
SHA1

dc52478a0fa3a62d80ae7d5282d5595195e32905
SHA256

be609d7ca618283bd1e9aa9fa540afd1d8f3898eef1e2bf92647c7868241758b
SHA512

a84c5d5f9986a8339bd75c020ee348f40599e4e90f9f1e3b35194f91fb6ebc88418692c002f91e3ffee2266f27956b05f8aa62a3be93e53f715f1a021ab66720
SSDEEP

1536:/kf1zwQVg/8WuREUlOQnF7TkkYSDY6ep5f1zwQVgvXg6Y+:s1zwL/8WuREcnFEkYSYpJ1zwLvX

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.ileg-be609d7ca618283bd1e9aa9fa540afd1d8f3898eef1e2bf92647c7868241758b
.exe windows x86

8b882453a4787c640876aa61fa204ce6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
ord552
Zombie_GetTypeInfo
ord592
ord593
ord594
ord595
ord598
ord706
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord716
ord717
ord319
ord533
ProcCallEngine
ord644
ord537
ord681
ord576
ord685
ord578
ord100
ord579
ord610
ord320
ord321
ord616
ord617
ord619
ord542
ord580
ord581

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE