Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220901-en
General
-
Target
Trojan-Ransom.Win32.Blocker.jcen-18625f50963539fc6c3b0a78b82b50b215ba1037e9fa27614620702d790ca677
-
Size
720KB
-
MD5
e84dc280fac4426b69a668ea0efbcdbc
-
SHA1
56d9186a17ac398d1596d9814caf4f2a71da0444
-
SHA256
18625f50963539fc6c3b0a78b82b50b215ba1037e9fa27614620702d790ca677
-
SHA512
519d8de6b1fa2a0d7590d4b627069612388e209d51960867048a4bad7a13e7dd540fe2c234244aa58c625f250fc74862124f4c9ca75f80dcf196c58aeec0715b
-
SSDEEP
6144:T3Te8ySm8hQAAIfFrRXuEE+0l97mKwKROHVQ886JQPDHDdx/Qtqa:+/zkFF+EExZmKbRiV3PJQPDHvd
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.jcen-18625f50963539fc6c3b0a78b82b50b215ba1037e9fa27614620702d790ca677.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 184KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 148KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE