Static task
static1
Behavioral task
behavioral1
Sample
slam.ransomware.builder.installer.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
slam.ransomware.builder.installer.exe
Resource
win10v2004-20220812-en
General
-
Target
slam.ransomware.builder.installer.exe
-
Size
6.8MB
-
MD5
12bc69199ebd2eeb7bba09953f29fb9a
-
SHA1
6a67ecc85e65b6685b6734a463a7fb30048d0d46
-
SHA256
cdc5668a7f53b99d098443df44a597a2f910ae5d55d42ea059c29dc5e250f045
-
SHA512
32c2b27c9576344d659142ee8fd0727ad182baab3217290382c7e23cdf3c95e68962ec8979290a02c78648a7d4070a4bb785fe44e8bad906b6d9906213866507
-
SSDEEP
196608:QO0jDOM+uGFAgEXlhsjNMxKF6m+LB3U3UG62I3Hpd9j:QO03OJuGqgxNM4F2LKkG62I3jZ
Malware Config
Signatures
Files
-
slam.ransomware.builder.installer.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.8MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ