Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20220812-en
General
-
Target
Trojan-Ransom.Win32.Blocker.jequ-421e7aaf4196882affc21f6e35191bf318118773576cbbdf71c95a636c99ac28
-
Size
4.3MB
-
MD5
095472ff7c7bdbe99b5d1c0167e2444e
-
SHA1
9333a252ae8e74a4194f259c1dad8440715bde97
-
SHA256
421e7aaf4196882affc21f6e35191bf318118773576cbbdf71c95a636c99ac28
-
SHA512
e3b3ef80dda80389ff0daf831075a63725f1f9aadcfeb1784c53f7845f00ec5cac7c0fde8965c71ec272a8c9d2827c8b11138a62f37eafa09aa2eb580574918b
-
SSDEEP
98304:Uu0oav6kLd4Mu1iV/RDhZQXX6OUpYYlkKQdYibeWdjF:H0D6kR4Mu6heXX6mndiG
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.Blocker.jequ-421e7aaf4196882affc21f6e35191bf318118773576cbbdf71c95a636c99ac28.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 4.2MB - Virtual size: 20.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE