Trojan-Ransom[.]Win32[.]Blocker[.]iwan-7eaa47b86d427396ca4f769571f1805d8eed7f3bbe06e5e274f7e78e0ce7fa11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.iwan-7eaa47b86d427396ca4f769571f1805d8eed7f3bbe06e5e274f7e78e0ce7fa11
Size

272KB
MD5

5e642b8bd549d58755a5f128f9dabc08
SHA1

68549a3ae03994bb1d899a1063170f9ea34bf8ab
SHA256

7eaa47b86d427396ca4f769571f1805d8eed7f3bbe06e5e274f7e78e0ce7fa11
SHA512

04c80a59038506be292bc21bf28e8145a2b3e71633cd3d15ffabe6b5b906513c4d7d204abb38b1c5ca0bd15498845bbbc88212b933b6f31767b4faadb5ae1e37
SSDEEP

3072:r1zwLUZh+E5OuCyeUkRkkmBpl1zwLvj/NruC:r1z1Zh/1kRkjpl1zQN

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.iwan-7eaa47b86d427396ca4f769571f1805d8eed7f3bbe06e5e274f7e78e0ce7fa11
.exe windows x86

8b882453a4787c640876aa61fa204ce6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
ord552
Zombie_GetTypeInfo
ord592
ord593
ord594
ord595
ord598
ord706
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord716
ord717
ord319
ord533
ProcCallEngine
ord644
ord537
ord681
ord576
ord685
ord578
ord100
ord579
ord610
ord320
ord321
ord616
ord617
ord619
ord542
ord580
ord581

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE