Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Blocker.izzr-aa807920470726f2b9cae77c17e19a03e366768d2a4a665bf1954bc284a0d18f
-
Size
390KB
-
MD5
1416c8cec8e2da03407b67f98cbacdbd
-
SHA1
b8d8ff2205e4929f85ce90b9df064df5715158c0
-
SHA256
aa807920470726f2b9cae77c17e19a03e366768d2a4a665bf1954bc284a0d18f
-
SHA512
07dedef32e3106d97e51e79b55ac73dfdb7e54ced8424f5a50e037d20e9aa78e0e265106dee67f7685d20f51d6c821a3ec80d1b5ace0f5507c0383c047b24cd2
-
SSDEEP
12288:MawmPChRjOJriMRSWrwcnL9ELtp4TZ0jucbbWAhQWdWcQuo9n/0r:MacvjOJiMvj9Lt0jpbhvYc
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
Trojan-Ransom.Win32.Blocker.izzr-aa807920470726f2b9cae77c17e19a03e366768d2a4a665bf1954bc284a0d18f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 360KB - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE