Static

static

3

Resubmissions

05/08/2026, 11:02

260805-m5cecaab54

05/08/2026, 10:59

260805-m3t7dawbqh3

Sharing

Copy URL Twitter E-mail

General

  • Target
    ransim.exe
  • Size 263.3MB
  • Sample260805-m5cecaab54
  • SHA256 4e63f602537e5539d3557753b596f9bed89b73f80bf14e8c310f41fb865a0168
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
pyinstaller

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • ransim.exe
    .exe 263.3MB
  • ransomware_simulator.pyc
    64KB

ransim.exe

  • IMPHASH cf72283be50852e418ce6bbb6b645835
  • SHA256 4e63f602537e5539d3557753b596f9bed89b73f80bf14e8c310f41fb865a0168
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:6windowsx64arch:x64

  • Detects Pyinstaller

    pyinstaller

  • Unsigned PE

    Checks for missing Authenticode signature.

Password
umn1u74y mn1uY4 NMNMU4YNM Y4HY1 4HH4 14H1 H48Y1 84H1 1
Minor OS version
0
Major OS version
6
Entry point
385024
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths