Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220901-en
General
-
Target
Trojan-Ransom.Win32.Blocker.ivbx-595fe1cf65b23372a50e285a9dbde85bdb058617e61b71ac3fcfd2e23f12bec9
-
Size
1.8MB
-
MD5
83b886a0857eebd55eb9ed3f226e9237
-
SHA1
bc37542ab4669b09e5d69069d061d73135649c77
-
SHA256
595fe1cf65b23372a50e285a9dbde85bdb058617e61b71ac3fcfd2e23f12bec9
-
SHA512
05569cba171529693e71df7ed3f59c04620f5184750d8c9517d0ec3eb75021afa7b0fd5b3fd78235dd51eb26a299f98f8a5fe70f3620259c65cddbf2953d80b2
-
SSDEEP
1536:+EfFNvtgmAl7z5dKY6yuJPW8K43w9NXOM1aRl/i6JWT0S9yXnBibnouy8gHn2JX:+YLmGO4W849NXO9RlK6gOxiDouto2N
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
Trojan-Ransom.Win32.Blocker.ivbx-595fe1cf65b23372a50e285a9dbde85bdb058617e61b71ac3fcfd2e23f12bec9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE