Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220901-en
General
-
Target
Trojan-Ransom.Win32.Blocker.jagv-e2e2d93173e986e2a1c28e145795780c5f7993e24ba7bc513b3d3134ce5017ae
-
Size
315KB
-
MD5
2ff15b3fac2593a91839a4363aab0722
-
SHA1
1647ca1252d3ed728cf7787be15bf8a137a2a4f3
-
SHA256
e2e2d93173e986e2a1c28e145795780c5f7993e24ba7bc513b3d3134ce5017ae
-
SHA512
886bcde87111475f5c57ed359d58ff31c6a9e2579377200dac27982b6baa3e620df2cd958966b9db4d9cac8c5b7c00cdca574ed4204d61773c06592b5616800a
-
SSDEEP
6144:lvI81gaNkroK0zat8GzwzkIXfYnPYkoM8w5ybgsa:lQ8qJMK0qjIQnA7Mn5yMsa
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
Trojan-Ransom.Win32.Blocker.jagv-e2e2d93173e986e2a1c28e145795780c5f7993e24ba7bc513b3d3134ce5017ae.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 17.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .js windows x86