Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220901-en
General
-
Target
Trojan-Ransom.Win32.Blocker.flnh-0e1a8af83e7206e64d25dcede7dacb462ef8ce26d1aba20fd0d6596bac5c282b
-
Size
278KB
-
MD5
3723cdebce5a928f35ebf8e7076858a7
-
SHA1
799972bcd1ecb6e153d8075f155ea121d39057c9
-
SHA256
0e1a8af83e7206e64d25dcede7dacb462ef8ce26d1aba20fd0d6596bac5c282b
-
SHA512
3d1e66716f3c69b1813f0167c2540d21e76f4c41155cc21c362c050fbf7b48df5a88b3bbba94f0ac5da27b8184c9b3cea690f7ab0e0fe758f8269aacfe39d551
-
SSDEEP
6144:QeW3j8JWqY9quzzD4NHvBaTxEafCRE+Xfw/JjEPr0:Qey+gEHvBaTs1b
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.flnh-0e1a8af83e7206e64d25dcede7dacb462ef8ce26d1aba20fd0d6596bac5c282b.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ