Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Blocker.fkzq-80dd95fe41197eba7ed41ca09ea9877908dcd101224d3c52062b98ae608445ed
-
Size
32KB
-
MD5
3fce2d3bbfab4b1bc658cc1942087cb4
-
SHA1
09641e7797d3afd3a616a275c4a185b0df6cad6b
-
SHA256
80dd95fe41197eba7ed41ca09ea9877908dcd101224d3c52062b98ae608445ed
-
SHA512
634cfb27b80133721b5f4db1258a6bc3e37d175866d68b66b3f85c12a1c8957c7627263b5121ff3cf454060cbe75d5770e566f0d4cc773555865b459ac03120f
-
SSDEEP
384:NGIwkOjFflnDDp9habKHeMkeUKdaV8BH1VXMJ8BLUo+KA+Md/Gb81Cn2nhO2:4f59fp9sIWobbiGbX2o2
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.fkzq-80dd95fe41197eba7ed41ca09ea9877908dcd101224d3c52062b98ae608445ed.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ