Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Blocker.ileg-9af89f2f20f31ea7241032f3d0fb7c223ca55e8eeee7902bc9b3169b1ce08f3f
-
Size
1.1MB
-
MD5
2d783d48fea0e28b1417cc3d4f717c54
-
SHA1
e3c3472108943e412be8d3e8cfb452ca87ed7a67
-
SHA256
9af89f2f20f31ea7241032f3d0fb7c223ca55e8eeee7902bc9b3169b1ce08f3f
-
SHA512
4e89ed23583697a55758434daea231b617db486c9eca7a39ec2f799d87de4deeb3c7312d86fa10254a0652b17a8fcf436f93c4e54d0797a45d06aaf11ca46d95
-
SSDEEP
24576:KvehviuXbZKXJrr186amIWgVRFyIMX5xv+ZXmRE43sbjiVNcC9:Kkv7XbQsJJWgg5X5kxmRR8OND9
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.ileg-9af89f2f20f31ea7241032f3d0fb7c223ca55e8eeee7902bc9b3169b1ce08f3f.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE