Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.BlueScreen.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.BlueScreen.exe
Resource
win10v2004-20220901-en
General
-
Target
Trojan-Ransom.Win32.BlueScreen.na-0374dfc03f99a8868e0e06b39e41c82b5f739f7dfcd1f04759c0ef7448fbb5d9
-
Size
77KB
-
MD5
7e8592b7d0ef5fcdf256061ca1f42f83
-
SHA1
ebbd855363b5cbe6d43315171b1d088e4ed1b8c1
-
SHA256
0374dfc03f99a8868e0e06b39e41c82b5f739f7dfcd1f04759c0ef7448fbb5d9
-
SHA512
e5ca1c54e1e49883ba00fe0bbb5620675a8b76426ef7d40e3c8c63a2173c3477286f5c640239144ede50f97e69e684c618169a6b3f120a419bcf4be7004b4f7e
-
SSDEEP
1536:w0Pa02BjNWRaBX4TqEj+AKUus6TjVhdmNliai2yngqF9OgVBcoHDmnh:XPavWRajg+AB6XVhdm/ishIO+coHqn
Malware Config
Signatures
Files
-
Trojan-Ransom.Win32.BlueScreen.na-0374dfc03f99a8868e0e06b39e41c82b5f739f7dfcd1f04759c0ef7448fbb5d9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 921B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 582B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ