Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Blocker.jcen-c7e3d48a6b6e0760d0535f156ece8ad43cca08eb41b5b0296c1932f8bcba8943
-
Size
736KB
-
MD5
cbb7a7459f030576e850a090869de15d
-
SHA1
4f4e74e8cb9f481e63e5b1e15568a04125863546
-
SHA256
c7e3d48a6b6e0760d0535f156ece8ad43cca08eb41b5b0296c1932f8bcba8943
-
SHA512
da16175d573e4e529552b45cf67d03a04c85b7dfc3e8292bb5aa5ba8816e2d9a6d1d23288be79b0512a065cca137c8355c319d3208f4754a62024bbdebdb6d4c
-
SSDEEP
6144:N1Qv8rK3FQp4LGCr9a9n4FRm6RGMXKqCQFHgTOE2s86JQPDHDdx/Qtqa:OOkiCpat4FU6JXKqFZgOE3PJQPDHvd
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.jcen-c7e3d48a6b6e0760d0535f156ece8ad43cca08eb41b5b0296c1932f8bcba8943.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 184KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 148KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE