Trojan-Ransom[.]Win32[.]Blocker[.]jdfh-e95e4cd2396c39b66cf3f2edcb13df8a6b56a3426e5d189ffc7c6a3fab7a515b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.jdfh-e95e4cd2396c39b66cf3f2edcb13df8a6b56a3426e5d189ffc7c6a3fab7a515b
Size

95KB
MD5

e8dd469b7847e5f0b855436369bf2b11
SHA1

eefa536e44e7668753b9ff3d17cc052e03e17b95
SHA256

e95e4cd2396c39b66cf3f2edcb13df8a6b56a3426e5d189ffc7c6a3fab7a515b
SHA512

643e8e2a764fb5e92206ea16387228d9f2344357e71730be8f9d2bf135c08adc3c499dbd6cb6f75c9e6a2cad8f0f32e5898fbc8eabc3f39b3f9466cc4364c431
SSDEEP

1536:PVtGgyGe/IH0QG5j4rBmW/R+ECMsh0G5V33zj/IDElgfz:tMgy9/IUT94x/R+EC7vP/IAmf

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.jdfh-e95e4cd2396c39b66cf3f2edcb13df8a6b56a3426e5d189ffc7c6a3fab7a515b
.exe windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 11KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1stcryp
Size: 512B - Virtual size: 4KB