Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220901-en
General
-
Target
Trojan-Ransom.Win32.Blocker.ivbx-047e271c70338bf03391526a4e7d3797ad642a0218372bcd901c030abf3dd29f
-
Size
1.0MB
-
MD5
f0be3c31cfd5ba545e7538d4a3b5a2cc
-
SHA1
d9274bf28bbbc3294dbcfffd881ec60662d5d0e9
-
SHA256
047e271c70338bf03391526a4e7d3797ad642a0218372bcd901c030abf3dd29f
-
SHA512
e01727306bd74bf267d847dd9aa3053278ff0be4d73390b4577e06ea7bb3045fa8e416acd532c5487e0c61188eb4dc900bd0bf7994db7f2f87a7526e92c2bdfe
-
SSDEEP
1536:+EfFNvtgmAl7z5dKY6yuJPW8K43w9NXOM1aRl/i6JWT0S9yXnBibnouy8gHn2JX:+YLmGO4W849NXO9RlK6gOxiDouto2N
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
Trojan-Ransom.Win32.Blocker.ivbx-047e271c70338bf03391526a4e7d3797ad642a0218372bcd901c030abf3dd29f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE