Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Blocker.ayig-a44b844a4cb25d207909684a093a653e4746d73f300c77b2e0ba222b0e2151c1
-
Size
49KB
-
MD5
2042c50e79256a6d1a3978c5b30d071d
-
SHA1
392feebe779e5bb0e63e58496bf918094bf135b1
-
SHA256
a44b844a4cb25d207909684a093a653e4746d73f300c77b2e0ba222b0e2151c1
-
SHA512
129bd5f8ac3b06cb52713ab6396d071954023da3e8848806bc45bea7a53850760d580773b0d1759f34a78b3b713b6a53a4dd6ee08d31ed4744942177c551c051
-
SSDEEP
768:bbSd/MdfrtKkM5fLwmm8hqzhZoVTLU0iV25G89vvm+i2Ac/ua5SlBqT:bZFMzfLo8h4HoVTLm25Gc3m+i2Agylu
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
Trojan-Ransom.Win32.Blocker.ayig-a44b844a4cb25d207909684a093a653e4746d73f300c77b2e0ba222b0e2151c1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zwqkfun Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE