Trojan-Ransom[.]Win32[.]Blocker[.]jezk-4b4bba61a77be71251aaf9b4e995177c2d4ea6e5accfae1cb34a158b3e8b80f7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.Blocker.jezk-4b4bba61a77be71251aaf9b4e995177c2d4ea6e5accfae1cb34a158b3e8b80f7
Size

316KB
MD5

4d19ac038384210ebe862613d01e21da
SHA1

d461e8d357567b771eca75335251d12aae44e0b6
SHA256

4b4bba61a77be71251aaf9b4e995177c2d4ea6e5accfae1cb34a158b3e8b80f7
SHA512

688936e314a10d1e74551d2618c83cd231888f5925654cb630ac738b42fcabbba0b0af5237a3741794cc61be88275580e687d0cb8353104ec7c963c1371f46b7
SSDEEP

6144:MCItjuoK/fv1hDMisoq4JSgmZ1YtDM0VlqKv1:iqoK/zL61YtXoKv

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.Blocker.jezk-4b4bba61a77be71251aaf9b4e995177c2d4ea6e5accfae1cb34a158b3e8b80f7
.exe windows x86

7b8d3b5ee49bebc3455bc9565fdb7011

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ