Trojan-Ransom[.]Win32[.]Blocker[.]iwdz-9ff047f69a9a0315cc7984c5ecbc1bcfe4e2f65f84dc74b54a34bc187c89bea8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.iwdz-9ff047f69a9a0315cc7984c5ecbc1bcfe4e2f65f84dc74b54a34bc187c89bea8
Size

48KB
MD5

b4f13b30fad1263c00a3bf6dab44a792
SHA1

1802433f552109c11c41420fe0d3834ddb0d0a88
SHA256

9ff047f69a9a0315cc7984c5ecbc1bcfe4e2f65f84dc74b54a34bc187c89bea8
SHA512

f610acd6db084b57b785248f56a95c037db14f76803a87e340ca92233a722a27229be613c37ef312a3e0939a3e9bbc9edbd8ac8a51b16ae63681be69c4cbaa3a
SSDEEP

768:2XCXyMMZShA4AvN3vILkaGh73MTWqyAFvW2Nr9wgjcI+O:9yMMbNfILkebYI+O

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.iwdz-9ff047f69a9a0315cc7984c5ecbc1bcfe4e2f65f84dc74b54a34bc187c89bea8
.exe windows x86

d9e727e04741020408958c0aa347f2bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord667
ord300
ord595
ord303
ord306
ord520
ord309
ord631
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord713
ord608
ord716
ord717
ProcCallEngine
ord537
ord645
ord648
ord681
ord576
ord685
ord578
ord100
ord612
ord617
ord650
ord546
ord581

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ