Trojan-Ransom[.]Win32[.]BrowHost[.]em-979313e809183a1c2a2ef6c034b0ffd05d1f7cbd8e22e932bb982ed4dda88105 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan-Ransom.Win32.BrowHost.em-979313e809183a1c2a2ef6c034b0ffd05d1f7cbd8e22e932bb982ed4dda88105
Size

2.8MB
MD5

14e7342dd147f24eaed8023c9444dbdc
SHA1

cc5fe316748313627cdad7750ed07acd532515d5
SHA256

979313e809183a1c2a2ef6c034b0ffd05d1f7cbd8e22e932bb982ed4dda88105
SHA512

a185b18ed345881868ed4a7a501849e9c3596b8a653a59fd1bb299d46f7fb57fac6bd95cd215d4ce61e31fcc3cc7a4002d52a9571a91c0e9a732a6a21ee6058d
SSDEEP

49152:drcWO6ya7GXo4cVBxMyAfwLflgwFxlHet8iw9hhCalR0F6HXZ615eTy0grmqBTgH:m1BTgBSDf3yJ

Score

N/A

Malware Config

Signatures

Files

Trojan-Ransom.Win32.BrowHost.em-979313e809183a1c2a2ef6c034b0ffd05d1f7cbd8e22e932bb982ed4dda88105
.exe windows x86

6c340b2e1df2b20b71a5519b5f7532b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
GetProcAddress
TlsGetValue
LoadLibraryA
ExitProcess
SetEvent
VirtualProtect
IsValidLocale

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 953KB - Virtual size: 953KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ