Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Blocker.fvam-1f63312b4afb914e513648dead33c2ca83790fd4e4779a8ae3ae70d9e790e328
-
Size
5.3MB
-
MD5
b4636b36f92278765702862e98a1610c
-
SHA1
955f1d62480f3234d5d4d7e38b5e36f051bf6dc7
-
SHA256
1f63312b4afb914e513648dead33c2ca83790fd4e4779a8ae3ae70d9e790e328
-
SHA512
94f5e6af974d1e4024586560717e4df1f87f29cb57871d4caaf59c0df6b3121be3dd4a59b0b32ae09f6f182b89bdfad6da0b5450e4b9e8e6e207ecba59b3c76a
-
SSDEEP
98304:fmu1JlRYU/ms0Tu0oaKINAcSsogNEHEqxo/rCeH0fzQK0bvJy:fBXyTFXdSsogNUEqcueH0fMK0bB
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.fvam-1f63312b4afb914e513648dead33c2ca83790fd4e4779a8ae3ae70d9e790e328.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ