Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Blocker.jcen-dce061f76de1918de37df264e238de418cd9a8bdf244881af7a60954a3c88753
-
Size
700KB
-
MD5
781c7b91969ca0a7c3becd6977e1e4aa
-
SHA1
c8cdc7da18ff2836b01f5f29a679c0e918abf8fa
-
SHA256
dce061f76de1918de37df264e238de418cd9a8bdf244881af7a60954a3c88753
-
SHA512
573cd0f9a7146e70d4c00dec9692c26fbddff94656cae0794bf8eec784f3cc3f09d46a0c05420a62c4f9f7d37d5bb2a3d3b561d28d31dcac353df23d3e805b8b
-
SSDEEP
6144:D3ue8ySm8hQAAIfFrRXuEE+0l97mKwKRqHVOFPb86JQPDHDdx/Qtqa:J/zkFF+EExZmKbRuVOFPbPJQPDHvd
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.jcen-dce061f76de1918de37df264e238de418cd9a8bdf244881af7a60954a3c88753.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE