Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Blocker.iwls-5a1b8e4b27e5465ec494764545ca40aab3302534e5084263fd55d91457bfb94b
-
Size
83KB
-
MD5
521734c36660c0f91ae9ce85b26edeb6
-
SHA1
52be71ef234f3d6a2c35c87c05fe35a0d2682190
-
SHA256
5a1b8e4b27e5465ec494764545ca40aab3302534e5084263fd55d91457bfb94b
-
SHA512
242c748103a57849a80d7ed0d88e5d083e68f9e09a02451defe03b60cee7beabbea136bbb785a568f3e3b72439db70c1b01ff25c34375313a09f4f747abf0950
-
SSDEEP
1536:fuEZX1RKsmgdA1tJXVdCnGGucgrtKvTXYixiIaRhdsRaJ:fPlKsmgdA1tBVd4GGucgrtKvTXYixiI0
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.iwls-5a1b8e4b27e5465ec494764545ca40aab3302534e5084263fd55d91457bfb94b.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 38KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE