Red Banner Ransomware[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Red Banner Ransomware.exe
Size

32KB
MD5

623084fd2105113be2d8eabda921ad10
SHA1

6aa57c3d4e4379ca2464ff12729c00d9b12fdc44
SHA256

f9438917af7785c2d547fab5d0ff46177b817b2efd717bbb0be07d24eb2eedc8
SHA512

2b79868ba39f1ae4af16b251c7a28a9db6ae3e304ce06cecb52413432a49f19d7efcfb0e338f40f898095045350bc8f81d4fd18025bba05af272e13742f8c148
SSDEEP

768:Ro6MwddvqSEa6BA2+1kK5/u8Wkazvs+NbEC0Jv:RBvazvs+9Edv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Red Banner Ransomware.exe

Files

Red Banner Ransomware.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ