Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220901-en
General
-
Target
Trojan-Ransom.Win32.Blocker.ajud-2b31b136f3682ba6e1cb535582d0150398af5cb191947b0664e495d98109fc7e
-
Size
865KB
-
MD5
679446745f533eef714ffd47b1fd38e8
-
SHA1
9c32cc325976156b61b84078a03bba2857b90807
-
SHA256
2b31b136f3682ba6e1cb535582d0150398af5cb191947b0664e495d98109fc7e
-
SHA512
b3e92a50b4fd337d0aaf771b5cc0d01a3934fcd0ca318d39e2c4206ff5412e7b2c4c37ba8a0ee558e267c6a0d17326080be2d8de89d83744c831ef248e21d089
-
SSDEEP
12288:RtPzYXka378uQJVuXyTeqKQtn6v7saUGIoI2Xk6qSzwx3hBFYuT07ftWZ9vvHCs:Ren3mJVuC5Kp7sroI2UuyFH0rYZ16
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.ajud-2b31b136f3682ba6e1cb535582d0150398af5cb191947b0664e495d98109fc7e.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 832KB - Virtual size: 832KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ