Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Blocker.ikyf-b1f6f4088251863237fb5ebec6b243ed8e3d9a39c479ed23320d5e5bb93e36d4
-
Size
95KB
-
MD5
bc0040f433865c8f74cd8225e5b2b43f
-
SHA1
b8a62cc8b412d10332b9d12ef6536d2b2c7c3f8c
-
SHA256
b1f6f4088251863237fb5ebec6b243ed8e3d9a39c479ed23320d5e5bb93e36d4
-
SHA512
d1d60f40800dcc1b6c89e007e9370b09b39de7435c7b655dd08810ae078c463f2de120ba71b42d08bc27000b0921d4f98d0fbdd9e24ba2fbafb6566b821693f7
-
SSDEEP
1536:ORFpPMrxU3VEOErzNwczFuRvoU1jnvcWnpeodAF/1bhKMcsuT13AT1fjy:ORnMleyOErzicRuR/1jvq75v6PRApf
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.ikyf-b1f6f4088251863237fb5ebec6b243ed8e3d9a39c479ed23320d5e5bb93e36d4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 89KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE