Static task
static1
Behavioral task
behavioral1
Sample
main.exe
Resource
win10v2004-20250502-en
Behavioral task
behavioral2
Sample
main.exe
Resource
win11-20250610-en
Behavioral task
behavioral3
Sample
ransom.exe
Resource
win10v2004-20250619-en
Behavioral task
behavioral4
Sample
ransom.exe
Resource
win11-20250619-en
General
-
Target
439ff2060a600d666dafcf86f7ef8fea5ee0cca7e39521c986a3181d99ede61d.zip
-
Size
10.0MB
-
MD5
0739c5c628cd9827ad276fcdeab6866d
-
SHA1
d35da3f4e36eebf36a130bc7e0182fc4c35cf551
-
SHA256
439ff2060a600d666dafcf86f7ef8fea5ee0cca7e39521c986a3181d99ede61d
-
SHA512
cbcc268a6ffd1d7da8454d9d19e5dadff2f6b82f7a24c71c600af9a1df43cd94c01189d5e6536058238ee3941cc263ba36b91bebb7cd9a46d2bc7a8af8975a8e
-
SSDEEP
196608:E41NwEkT12Yfagn1Xii8ag+1LH7oChw7nyHcJQTUqFXPRmehiK1oCu4Wm1sSS:EaNwz26JRxn1oChw7ny8JnIpmecKuchU
Malware Config
Signatures
-
Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack002/main.exe unpack002/ransom.exe unpack001/key_gen/main.exe unpack001/key_gen/ransom.exe unpack001/ransom/Release/ransom.exe
Files
-
439ff2060a600d666dafcf86f7ef8fea5ee0cca7e39521c986a3181d99ede61d.zip.zip
-
key_gen/key_gen.zip.zip
-
main.exe.exe windows:4 windows x64 arch:x64
b6f255793d9218bffb1d265f125394e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
AddAtomA
CloseHandle
CreateEventA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FindAtomA
GetAtomNameA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReleaseMutex
ReleaseSemaphore
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetCriticalSectionSpinCount
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
msvcrt
__C_specific_handler
___lc_codepage_func
__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_endthreadex
_errno
_fmode
_ftime
_initterm
_lock
_onexit
_setjmp
_strnicmp
_unlock
_time64
_write
abort
calloc
exit
fclose
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getenv
isspace
iswctype
localeconv
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
printf
puts
rand
realloc
rewind
setlocale
signal
sprintf
srand
strcat
strcmp
strcoll
strerror
strftime
strlen
strncmp
strncpy
strxfrm
towlower
towupper
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
Sections
.text Size: 358KB - Virtual size: 358KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/57 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/70 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/81 Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/92 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ransom.exe.exe windows:6 windows x86 arch:x86
f032b4cc0eb4f2eac3f528efe4c73962
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndPaint
GetWindowLongW
PostMessageW
SetWindowPos
EndDialog
GetSystemMetrics
ShowWindow
OpenClipboard
GetDlgItemTextA
SetTimer
DrawTextA
CloseClipboard
EmptyClipboard
MessageBoxA
LoadBitmapW
SetClipboardData
wsprintfW
GetDlgItem
SetRect
KillTimer
SystemParametersInfoW
DialogBoxParamW
FindWindowA
LoadImageW
InvalidateRect
BeginPaint
MessageBoxW
gdi32
BitBlt
CreateFontA
SelectObject
CreateCompatibleDC
DeleteDC
SetTextColor
SetBkMode
GetObjectW
DeleteObject
shell32
SHGetFolderPathA
kernel32
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetFileSizeEx
FreeEnvironmentStringsW
MultiByteToWideChar
LCMapStringW
CompareStringW
SetEnvironmentVariableW
GetStringTypeW
GetProcessHeap
FlushFileBuffers
WriteConsoleW
HeapSize
HeapReAlloc
WideCharToMultiByte
SetUnhandledExceptionFilter
HeapFree
GetLastError
SizeofResource
FindFirstFileW
FindNextFileW
WriteFile
WaitForMultipleObjects
GetTempPathW
FindClose
CreateFileW
GetSystemDirectoryW
FreeResource
Sleep
LockResource
GlobalAlloc
CloseHandle
CreateThread
LoadResource
FindResourceW
GlobalLock
GetModuleHandleW
GetConsoleWindow
GlobalUnlock
GetDriveTypeW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
DecodePointer
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
HeapAlloc
RaiseException
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
SetEndOfFile
SetFilePointerEx
DeleteFileW
ReadFile
GetConsoleMode
ReadConsoleW
GetFileType
GetConsoleOutputCP
ExitProcess
GetModuleHandleExW
QueryPerformanceFrequency
GetStdHandle
GetModuleFileNameW
GetCommandLineA
GetCommandLineW
SetStdHandle
Sections
.text Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7.6MB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
rsa.txt
-
key_gen/main.cpp
-
key_gen/main.exe.exe windows:4 windows x64 arch:x64
b6f255793d9218bffb1d265f125394e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
AddAtomA
CloseHandle
CreateEventA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FindAtomA
GetAtomNameA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReleaseMutex
ReleaseSemaphore
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetCriticalSectionSpinCount
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
msvcrt
__C_specific_handler
___lc_codepage_func
__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_endthreadex
_errno
_fmode
_ftime
_initterm
_lock
_onexit
_setjmp
_strnicmp
_unlock
_time64
_write
abort
calloc
exit
fclose
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getenv
isspace
iswctype
localeconv
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
printf
puts
rand
realloc
rewind
setlocale
signal
sprintf
srand
strcat
strcmp
strcoll
strerror
strftime
strlen
strncmp
strncpy
strxfrm
towlower
towupper
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
Sections
.text Size: 358KB - Virtual size: 358KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/57 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/70 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/81 Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/92 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
key_gen/ransom.exe.exe windows:6 windows x86 arch:x86
cb6abf8f920e409d66e2c6e1dea5c53e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndPaint
GetWindowLongW
PostMessageW
SetWindowPos
FillRect
GetSystemMetrics
ShowWindow
OpenClipboard
GetDlgItemTextA
SetTimer
DrawTextA
CloseClipboard
EmptyClipboard
MessageBoxA
LoadBitmapW
SetLayeredWindowAttributes
SetClipboardData
wsprintfW
SetWindowLongW
GetClientRect
GetDlgItem
SetRect
KillTimer
SystemParametersInfoW
DialogBoxParamW
FindWindowA
LoadImageW
InvalidateRect
BeginPaint
MessageBoxW
gdi32
BitBlt
CreateCompatibleBitmap
CreateFontA
SelectObject
CreateCompatibleDC
StretchBlt
GetStockObject
DeleteDC
SetTextColor
TextOutA
SetBkMode
GetObjectW
DeleteObject
CreateSolidBrush
shell32
SHGetFolderPathA
kernel32
FindFirstFileExW
GetFileSizeEx
WideCharToMultiByte
MultiByteToWideChar
IsValidCodePage
LCMapStringW
CompareStringW
HeapFree
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
GetProcessHeap
FlushFileBuffers
WriteConsoleW
HeapSize
HeapReAlloc
GetCurrentProcessId
SetStdHandle
GetCommandLineW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
SizeofResource
FindFirstFileW
FindNextFileW
WriteFile
WaitForMultipleObjects
GetTempPathW
FindClose
CreateFileW
GetSystemDirectoryW
FreeResource
Sleep
LockResource
GlobalAlloc
CloseHandle
CreateThread
LoadResource
FindResourceW
GlobalLock
GetModuleHandleW
GetConsoleWindow
WinExec
GlobalUnlock
GetDriveTypeW
QueryPerformanceCounter
DecodePointer
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
GetCommandLineA
RaiseException
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
SetEndOfFile
SetFilePointerEx
ReadFile
GetConsoleMode
ReadConsoleW
GetFileType
GetConsoleOutputCP
ExitProcess
GetModuleHandleExW
QueryPerformanceFrequency
GetStdHandle
GetModuleFileNameW
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
key_gen/rsa.txt
-
ransom/Release/ransom.exe.exe windows:6 windows x86 arch:x86
51ff6eea1c2dfc853310904ce154f487
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndPaint
GetWindowLongW
PostMessageW
SetWindowPos
FillRect
GetSystemMetrics
ShowWindow
OpenClipboard
GetDlgItemTextA
SetTimer
DrawTextA
CloseClipboard
EmptyClipboard
MessageBoxA
LoadBitmapW
SetLayeredWindowAttributes
SetClipboardData
wsprintfW
SetWindowLongW
GetClientRect
GetDlgItem
SetRect
KillTimer
SystemParametersInfoW
DialogBoxParamW
FindWindowA
LoadImageW
InvalidateRect
BeginPaint
MessageBoxW
gdi32
BitBlt
CreateCompatibleBitmap
CreateFontA
SelectObject
CreateCompatibleDC
StretchBlt
GetStockObject
DeleteDC
SetTextColor
TextOutA
SetBkMode
GetObjectW
DeleteObject
CreateSolidBrush
shell32
SHGetFolderPathA
kernel32
FindFirstFileExW
GetFileSizeEx
WideCharToMultiByte
MultiByteToWideChar
IsValidCodePage
LCMapStringW
CompareStringW
HeapFree
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
GetProcessHeap
FlushFileBuffers
WriteConsoleW
HeapSize
HeapReAlloc
GetCurrentProcessId
SetStdHandle
GetCommandLineW
GetFileAttributesW
DeleteFileW
SizeofResource
FindFirstFileW
FindNextFileW
WriteFile
WaitForMultipleObjects
GetTempPathW
FindClose
CreateFileW
GetSystemDirectoryW
FreeResource
Sleep
LockResource
GlobalAlloc
CloseHandle
CreateThread
LoadResource
FindResourceW
GlobalLock
GetModuleHandleW
GetConsoleWindow
WinExec
GlobalUnlock
GetDriveTypeW
QueryPerformanceCounter
DecodePointer
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
GetCommandLineA
RaiseException
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
SetEndOfFile
SetFilePointerEx
ReadFile
GetConsoleMode
ReadConsoleW
GetFileType
GetConsoleOutputCP
ExitProcess
GetModuleHandleExW
QueryPerformanceFrequency
GetStdHandle
GetModuleFileNameW
Sections
.text Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ransom/ransom.sln
-
ransom/ransom/Crypto/AES/aes.cpp
-
ransom/ransom/Crypto/AES/aes.h
-
ransom/ransom/Crypto/RSA/bigd.cpp
-
ransom/ransom/Crypto/RSA/bigd.h
-
ransom/ransom/Crypto/RSA/bigdigits.cpp.vbs
-
ransom/ransom/Crypto/RSA/bigdigits.h
-
ransom/ransom/Crypto/RSA/bigdtypes.h
-
ransom/ransom/Crypto/RSA/rsa.cpp
-
ransom/ransom/Crypto/RSA/rsa.h
-
ransom/ransom/Cryptographic.cpp.js
-
ransom/ransom/Cryptographic.h
-
ransom/ransom/Debug/Cryptographic.obj
-
ransom/ransom/Debug/aes.obj
-
ransom/ransom/Debug/bigd.obj
-
ransom/ransom/Debug/bigdigits.obj
-
ransom/ransom/Debug/ransom.exe.recipe
-
ransom/ransom/Debug/ransom.ilk
-
ransom/ransom/Debug/ransom.log
-
ransom/ransom/Debug/ransom.obj
-
ransom/ransom/Debug/ransom.obj.enc
-
ransom/ransom/Debug/ransom.res
-
ransom/ransom/Debug/ransom.tlog/CL.command.1.tlog
-
ransom/ransom/Debug/ransom.tlog/CL.read.1.tlog
-
ransom/ransom/Debug/ransom.tlog/CL.write.1.tlog
-
ransom/ransom/Debug/ransom.tlog/Cl.items.tlog
-
ransom/ransom/Debug/ransom.tlog/link.command.1.tlog
-
ransom/ransom/Debug/ransom.tlog/link.read.1.tlog
-
ransom/ransom/Debug/ransom.tlog/link.secondary.1.tlog
-
ransom/ransom/Debug/ransom.tlog/link.write.1.tlog
-
ransom/ransom/Debug/ransom.tlog/ransom.lastbuildstate
-
ransom/ransom/Debug/ransom.tlog/rc.command.1.tlog
-
ransom/ransom/Debug/ransom.tlog/rc.read.1.tlog
-
ransom/ransom/Debug/ransom.tlog/rc.write.1.tlog
-
ransom/ransom/Debug/rsa.obj
-
ransom/ransom/Debug/vc143.idb
-
ransom/ransom/Debug/vc143.pdb
-
ransom/ransom/Release/Cryptographic.obj
-
ransom/ransom/Release/aes.obj
-
ransom/ransom/Release/bigd.obj
-
ransom/ransom/Release/bigdigits.obj
-
ransom/ransom/Release/ransom.Build.CppClean.log
-
ransom/ransom/Release/ransom.exe.recipe
-
ransom/ransom/Release/ransom.iobj
-
ransom/ransom/Release/ransom.log
-
ransom/ransom/Release/ransom.obj
-
ransom/ransom/Release/ransom.res
-
ransom/ransom/Release/ransom.tlog/CL.command.1.tlog
-
ransom/ransom/Release/ransom.tlog/CL.read.1.tlog
-
ransom/ransom/Release/ransom.tlog/CL.write.1.tlog
-
ransom/ransom/Release/ransom.tlog/Cl.items.tlog
-
ransom/ransom/Release/ransom.tlog/link.command.1.tlog
-
ransom/ransom/Release/ransom.tlog/link.read.1.tlog
-
ransom/ransom/Release/ransom.tlog/link.secondary.1.tlog
-
ransom/ransom/Release/ransom.tlog/link.write.1.tlog
-
ransom/ransom/Release/ransom.tlog/ransom.lastbuildstate
-
ransom/ransom/Release/ransom.tlog/rc.command.1.tlog
-
ransom/ransom/Release/ransom.tlog/rc.read.1.tlog
-
ransom/ransom/Release/ransom.tlog/rc.write.1.tlog
-
ransom/ransom/Release/rsa.obj
-
ransom/ransom/bitmap1.bmp
-
ransom/ransom/bmp00001.bmp
-
ransom/ransom/ransom.aps
-
ransom/ransom/ransom.cpp.js
-
ransom/ransom/ransom.rc
-
ransom/ransom/ransom.vcxproj.xml
-
ransom/ransom/ransom.vcxproj.filters
-
ransom/ransom/ransom.vcxproj.user
-
ransom/ransom/resource.h
-
ransom/ransom/x64/Debug/Cryptographic.obj
-
ransom/ransom/x64/Debug/aes.obj
-
ransom/ransom/x64/Debug/bigd.obj
-
ransom/ransom/x64/Debug/bigdigits.obj
-
ransom/ransom/x64/Debug/ransom.log
-
ransom/ransom/x64/Debug/ransom.tlog/CL.command.1.tlog
-
ransom/ransom/x64/Debug/ransom.tlog/CL.read.1.tlog
-
ransom/ransom/x64/Debug/ransom.tlog/CL.write.1.tlog
-
ransom/ransom/x64/Debug/ransom.tlog/ransom.lastbuildstate
-
ransom/ransom/x64/Debug/rsa.obj
-
ransom/ransom/x64/Debug/vc143.idb
-
ransom/ransom/x64/Debug/vc143.pdb
-
ransom/ransom/x64/Release/Cryptographic.obj
-
ransom/ransom/x64/Release/aes.obj
-
ransom/ransom/x64/Release/bigd.obj
-
ransom/ransom/x64/Release/bigdigits.obj
-
ransom/ransom/x64/Release/ransom.Build.CppClean.log
-
ransom/ransom/x64/Release/ransom.log
-
ransom/ransom/x64/Release/ransom.tlog/CL.command.1.tlog
-
ransom/ransom/x64/Release/ransom.tlog/ransom.lastbuildstate
-
ransom/ransom/x64/Release/rsa.obj
-
ransom/ransom/x64/Release/vc143.pdb