Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.Win32.Blocker.exe
Resource
win10v2004-20230220-en
General
-
Target
Trojan-Ransom.Win32.Blocker.jpoc-269253135ed7108a0981a821dcbd41b5f3037e2f55bba790dba5955287344efd
-
Size
87KB
-
MD5
bf39f469e4af87274c2b97134fabdc93
-
SHA1
bbc7b5877148271a572ef3899de7be51a7c1cd6a
-
SHA256
269253135ed7108a0981a821dcbd41b5f3037e2f55bba790dba5955287344efd
-
SHA512
e6c7adb007fd75701b0f832ff8e81649dc3e20ebece4d5e614b35a0ef5e50cd5c041ddf9ec36e128513c35947c23399103b1833d4ab349c0baa79d705a91f27e
-
SSDEEP
1536:o04ryQiYjoJTPUA5tZUz7ubezM9XOzn0QEor9/tQS6XKRyp:d8A5t+7uyN70QEoJVMr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Trojan-Ransom.Win32.Blocker.jpoc-269253135ed7108a0981a821dcbd41b5f3037e2f55bba790dba5955287344efd
Files
-
Trojan-Ransom.Win32.Blocker.jpoc-269253135ed7108a0981a821dcbd41b5f3037e2f55bba790dba5955287344efd.exe windows x86
446929f4f2ccd8fd9d7d8422b1aefa3f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetStdHandle
GetConsoleCP
TlsGetValue
SleepEx
GetLastError
GetModuleHandleW
GetProcAddress
GetModuleHandleA
VirtualAlloc
LoadLibraryExW
LoadLibraryA
LoadLibraryW
FlushFileBuffers
DeviceIoControl
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetVersion
GetSystemTime
DosDateTimeToFileTime
lstrcatA
GetEnvironmentStringsW
FindResourceA
DeleteFileW
GetLocaleInfoA
lstrcpynA
LockResource
ExitProcess
SystemTimeToFileTime
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
RtlUnwind
HeapSize
user32
DispatchMessageA
FindWindowA
EndDialog
GetMessageA
GetDC
GetWindowRect
CharLowerW
ReleaseDC
GetSystemMenu
GetDlgCtrlID
SendMessageA
GetMenuState
gdi32
DeleteObject
CreateDCW
GetTextMetricsW
SetBkMode
EndDoc
GetTextExtentPoint32W
winspool.drv
GetPrinterDriverW
comdlg32
ReplaceTextW
advapi32
RegQueryValueExA
OpenSCManagerA
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ