Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Blocker.jequ-3069e2a5612e144ffcd963f769b3bf43341c91f605865c28243a8881639ba2b8
-
Size
4.3MB
-
MD5
1c9cbcad33065b7f49510570d9d9875e
-
SHA1
9abc4397b27efa015418fa7a12017b26df3d7f0c
-
SHA256
3069e2a5612e144ffcd963f769b3bf43341c91f605865c28243a8881639ba2b8
-
SHA512
7f7c9aa146a4f3b9748f5e79278211be4055f77f16cabe9aaf2b9e7963fadfc9ca41088b535d982f364b5868123be6e723ead0f2a24f28b229711820be846d08
-
SSDEEP
98304:WOk9z+d/onJjTX210qPDqmnUGYzzt0Bdi6Can8Arxck6e2McAG4:8z+dwjTm10qJCZ0Ti6CxAdckibp
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.jequ-3069e2a5612e144ffcd963f769b3bf43341c91f605865c28243a8881639ba2b8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 4.2MB - Virtual size: 20.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE