Trojan-Ransom[.]Win32[.]Blocker[.]ivcc-3273874717c1bd32236dc9f6740b4de2707858f73a036431c91570560fc84acd

General

Target

Trojan-Ransom.Win32.Blocker.ivcc-3273874717c1bd32236dc9f6740b4de2707858f73a036431c91570560fc84acd
Size

618KB
MD5

1e9cfab713db738452c37a620d181bb0
SHA1

26e5b982e67a8393b060bc4bb06641a7b8dae78f
SHA256

3273874717c1bd32236dc9f6740b4de2707858f73a036431c91570560fc84acd
SHA512

18ece7a27df34a7b88fb50b2a5d079e2fdd7f403e5e0f8c709b21564294caafa3fa9d129ab60f0dcf934b9512d250d6d072fdd7ba3f2a209455f233f41278691
SSDEEP

12288:6XyVnQWMjka0Uv3Bfhkg22SpbeZYFB4M4G3Y1gQdcORD4GLJIDst:SySWza0UpJkT2S0ZYFB6GoZdcOREk+E

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.ivcc-3273874717c1bd32236dc9f6740b4de2707858f73a036431c91570560fc84acd
.exe windows x86

d7b5a0bb34cfb23196d52d2221018637

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

socket
gethostbyname
htons
WSAStartup
shutdown
accept
listen
bind
recv
connect
send
closesocket
WSACleanup

psapi

EnumProcessModules
GetModuleFileNameExA

kernel32

Sleep
SetErrorMode
GetConsoleWindow
CreateMutexA
GetStartupInfoA
GetModuleHandleA
LocalFree
GetLastError
GetTickCount
lstrlenA
lstrcpyA
lstrcmpA
lstrcpynA
GetLogicalDriveStringsA
GetDriveTypeA
SetFileAttributesA
LoadLibraryA
GetProcAddress
GetVolumeInformationA
GetTempFileNameA
GetModuleFileNameA
GetTempPathA
CreateProcessA
Process32Next
DeleteFileA
TerminateProcess
CloseHandle
OpenProcess
Process32First
CreateToolhelp32Snapshot
ExitProcess
GetCurrentProcessId
CreateThread
GlobalAlloc

user32

ShowWindow
wsprintfA
IsCharAlphaNumericA

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_controlfp
_itoa
_strdup
_strcmpi
strcat
__setusermatherr
_initterm
__getmainargs
_acmdln
atoi
strlen
fclose
_unlink
fgets
strcpy
fopen
_except_handler3
calloc
isxdigit
fputs
rand
strstr
strrchr
strcmp
fwrite
ftell
fseek
memset
sprintf
strtok
printf
free
srand
__p___argv
__p___argc
_CxxThrowException
??3@YAXPAX@Z
_exit
_XcptFilter
exit

oleaut32

GetErrorInfo

Sections

.bss
Size: - Virtual size: 225KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d7b5a0bb34cfb23196d52d2221018637

Headers

File Characteristics

Imports

ws2_32

psapi

kernel32

user32

msvcrt

oleaut32

Sections

.bss Size: - Virtual size: 225KB

.data Size: 26KB - Virtual size: 25KB

.bss
Size: - Virtual size: 225KB

.data
Size: 26KB - Virtual size: 25KB