Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Blocker.ileg-99bf5353ebd7ea4aea90e560d80f411a67587ae1054fe6aea9f898349951b0cd
-
Size
100KB
-
MD5
ff700b3c0e746ba47676da1cc44cb8fd
-
SHA1
63c65f3ded048baa196f87b39e39087d5fc96aa9
-
SHA256
99bf5353ebd7ea4aea90e560d80f411a67587ae1054fe6aea9f898349951b0cd
-
SHA512
58ce45277c959cc4182bbdf6969f36e508eb0aea5f5852537f24164607c90ce9fbc45482b5cd7f86a9ab6e8d92a03f1741fc75dae4d47cf6b60f1a89807bfc0b
-
SSDEEP
1536:SPKVHg4ywGdY93OdDf1zwQVgv2yd+ApkHZCjZBGHaSjI+:SPOA4Yu9m1zwLv2m+5UZBGh
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.ileg-99bf5353ebd7ea4aea90e560d80f411a67587ae1054fe6aea9f898349951b0cd.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE