Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220901-en
General
-
Target
Trojan-Ransom.Win32.Blocker.dtej-95fb0bb328c4e6bf73d791080b649821b662ee26410eade20a3aa5f27fb4f5ee
-
Size
1.5MB
-
MD5
41a9e7c353133327451676965a5acef4
-
SHA1
d507f8b1e6725e95e0d1ed857b86038a921cfe6b
-
SHA256
95fb0bb328c4e6bf73d791080b649821b662ee26410eade20a3aa5f27fb4f5ee
-
SHA512
a1e34f2c7e356d13d25d1e24b4a0fdebc3a867c574e65e38af4dd2a7feba4b99f06b5cf44ca5661cfb993432e6b46ee17a46a0836bc95ec2134584bfbdb1435e
-
SSDEEP
24576:zdvSuXDNKgRInaBAslrvhL3/kQp0qWvlpdmCy3LQA4F8U1rWNivf9hpEaV0KEx:RVTRb/3/vWqGzAw1KNQEBKE
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.dtej-95fb0bb328c4e6bf73d791080b649821b662ee26410eade20a3aa5f27fb4f5ee.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ