Trojan-Ransom[.]Win32[.]Blocker[.]iwls-668fba2b543b420bf4347fc743aac4634d2ed863d1372c042bda4d7d421fd974 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.iwls-668fba2b543b420bf4347fc743aac4634d2ed863d1372c042bda4d7d421fd974
Size

83KB
MD5

7b86791e04655e18c5d29bbdd1eb2589
SHA1

7a299b15efd1066cd56f66b446387dbf0e2be0be
SHA256

668fba2b543b420bf4347fc743aac4634d2ed863d1372c042bda4d7d421fd974
SHA512

19bcb9af363acdddd19bf63c9fc8b2c46eb84fce474f0cce1ee3ded8129822e3c50ffd62a342623d937473c0b82da127d8394d0212d439ba85a1aeca6eb901d9
SSDEEP

1536:jTpqMcyoZS2Yi0H7BA11yI/ZnY8B4NlfvoiaRhdsRatH:hqtyocBDVKymZY8goiajBtH

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.iwls-668fba2b543b420bf4347fc743aac4634d2ed863d1372c042bda4d7d421fd974
.exe windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 38KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE