Behavioral task
behavioral1
Sample
2024-04-01_1d8324bbc0c4abe28984318f40522899_makop.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-01_1d8324bbc0c4abe28984318f40522899_makop.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-01_1d8324bbc0c4abe28984318f40522899_makop
-
Size
124KB
-
MD5
1d8324bbc0c4abe28984318f40522899
-
SHA1
edeaf04356da865b7870bbdf188a75eeed986378
-
SHA256
5212a28c3d8f83909e7e3d4131f1d46b83e3c2d81afb1c53d10170b16eaa5f82
-
SHA512
1f6664e7c6fa9fea4678b5ffd7dfec6ddfafd7ceb726418382b00aa6f27b5083796de2654a5f66e8086b1f03f5ee20c1b3fc1cfb8244626bb27d0eb3b0d0a305
-
SSDEEP
768:LO1oR/vVS1RzK4wbs+D/SIJX+ZZ1SQQwlfIOPzDgy6vd8lLF8:LlS1FKnDtufImz61iW
Malware Config
Signatures
-
MAKOP ransomware payload 1 IoCs
resource yara_rule sample family_makop -
Makop family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-01_1d8324bbc0c4abe28984318f40522899_makop
Files
-
2024-04-01_1d8324bbc0c4abe28984318f40522899_makop.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE