Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Blocker.jagv-5082892560dfd889563d69494f9825859bcba1875b1f057cab3f6fcc2d37d52f
-
Size
409KB
-
MD5
a43f7a426943009c850f4384a42efa06
-
SHA1
ca3ab56ea0d719a11e4b00c80c5371d4f191eec4
-
SHA256
5082892560dfd889563d69494f9825859bcba1875b1f057cab3f6fcc2d37d52f
-
SHA512
ab4f3643d84f5b12381e15d45597be71f57e3b29b839b0ff99eaf9d714416731f5a22c910a83ae419d9b3dd7a2b592aca9e028e2aa1b9440fa50d15edb2e588c
-
SSDEEP
6144:lvIj8N0oK0zat8GzwzkIX8NLoK0zat8GzwzkIXfYnPY9lrhdMwPT318TtDUTLnkH:lQjeK0qjISsK0qjIQnAYwPzSRDU8+0
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
Trojan-Ransom.Win32.Blocker.jagv-5082892560dfd889563d69494f9825859bcba1875b1f057cab3f6fcc2d37d52f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 17.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .js windows x86