Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220901-en
General
-
Target
Trojan-Ransom.Win32.Blocker.fccw-c16f7c6d96509d5f6d67e4080ed3e17158b9b369f3f30bad16879944481a0334
-
Size
1015KB
-
MD5
74384da07ec2b6aae00db798fcfc5d5b
-
SHA1
b51ca01f5d945585042d3d28412ece7f00757b44
-
SHA256
c16f7c6d96509d5f6d67e4080ed3e17158b9b369f3f30bad16879944481a0334
-
SHA512
1f8f02f76c20e35c5be389c3d79aa43d8dc71170ffa7b982cc8ca2a5e8ecfd91c5429ab682d98682143052f7685416acebe43700a086a8abdb3bbfa9f98100ee
-
SSDEEP
12288:7CjyJGiWBuik4uY1liQ5QheziDnLCkF1MthE/eNSvFeG29qhoO0aQC8auiSd35Aj:+jyJFWPJrsNskwkey8hkCHTauFAj
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.fccw-c16f7c6d96509d5f6d67e4080ed3e17158b9b369f3f30bad16879944481a0334.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 845KB - Virtual size: 845KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ