Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220812-en
General
-
Target
Trojan-Ransom.Win32.Blocker.eyrc-37a91a2334a08559850a7c830a2bbb1ceb9f313c2ddc80ad2ea4704f90b0754a
-
Size
368KB
-
MD5
7d0216a56aa4e378e540a3219a7ddde2
-
SHA1
f542a482b42c7820e0794925a708c61b21a98be1
-
SHA256
37a91a2334a08559850a7c830a2bbb1ceb9f313c2ddc80ad2ea4704f90b0754a
-
SHA512
0aa675ebfa06192e43b99e956f30763e8f115382ca708f54a1a881ea3eb0ebba96e75832c20d61e8c9b08f4daff072c6ce2a061fca89441eedd1ed6c41d25730
-
SSDEEP
6144:u7EdBkyHD8QD3xEFBnmBoqpXeQS4lmjjYC5/h+4AGgeev+jpz3QsbyB/ax:RvoQdErOZe1Yq+LGpgql3QsIe
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.eyrc-37a91a2334a08559850a7c830a2bbb1ceb9f313c2ddc80ad2ea4704f90b0754a.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 148KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ