Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220901-en
General
-
Target
Trojan-Ransom.Win32.Blocker.dpvm-9e1cf694b39c5e5e96e0a84fd7c14c73c6aef4973155484ab1b3f864f7f1a842
-
Size
230KB
-
MD5
4a8afa06ff75365161021545efe049cd
-
SHA1
2782013541933adf3d46b461c25cf7249a8fc1fd
-
SHA256
9e1cf694b39c5e5e96e0a84fd7c14c73c6aef4973155484ab1b3f864f7f1a842
-
SHA512
3c0c21c4f400cd302cadc4fc9c742b128997821eaec6855ce0ce4a82a1be76276b9e141ec11c3e5f9bc4d6965f24ff0ea424af0f173c6f9b9fe44dff1bcfb3c3
-
SSDEEP
6144:AMukfBfjMbrHYPhVIN9ZrEZPsajHt4bGpiKBC7fICrMXuO:AMPQXVNMZPTNZOICrMXu
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.dpvm-9e1cf694b39c5e5e96e0a84fd7c14c73c6aef4973155484ab1b3f864f7f1a842.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 222KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ