2024-05-01_2466510ebe202dd5790216e62c00e08a_bkransomware_karagany | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-01_2466510ebe202dd5790216e62c00e08a_bkransomware_karagany
Size

2.7MB
MD5

2466510ebe202dd5790216e62c00e08a
SHA1

78cfd865ed0f38b11c05082f5d1df4dbb486fd63
SHA256

b64d6d89b824019ee11e8fc37cd1c33a7ea4cd0a1e9d24e1303e02d457c6c0ab
SHA512

43119c6ac25f34a830872ef027ecadd5358ab2597ce9cffb594f2da282fe1eb2d8f1cb00dda570f67a0ba3913150ef46242361c9ba3b4c44fd8d369cd469c077
SSDEEP

12288:A5q8gbcImt0LDviQiJIP2QNnBNUbTYfUlvXk13z19Dt3KL9+aYFLq3ny7dNu4Dz:d8StziJYdNLfU1k1XDt3YZ3y7dsSz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-01_2466510ebe202dd5790216e62c00e08a_bkransomware_karagany

Files

2024-05-01_2466510ebe202dd5790216e62c00e08a_bkransomware_karagany
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

appvlp.pdb

Sections

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 180B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ