Static task
static1
Behavioral task
behavioral1
Sample
2024-05-02_6cfca5122390f57c1b84103d6addf4a0_bkransomware_karagany.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-02_6cfca5122390f57c1b84103d6addf4a0_bkransomware_karagany.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-05-02_6cfca5122390f57c1b84103d6addf4a0_bkransomware_karagany
-
Size
2.0MB
-
MD5
6cfca5122390f57c1b84103d6addf4a0
-
SHA1
44a2df8d28d12d2d0ec44ada9c939dd572e1c03b
-
SHA256
212f600695ff9575d2c1c9d432a0d7a693c642f37137f084118fea15de2748c1
-
SHA512
7bd5891c6ef20773c44f6b37fc8704b27f0de3a1f945bba3b3876addd919c4ab6dabf40d0f407a4582e4cf6d5c385d0e2cdd413956c89b60b33a6fcb43b98619
-
SSDEEP
49152:T5RakOElMaFLkz/IabjKoh9Wsok1X8xmN3Aek03noj45wlDT:bak7oIabjKoh9WsTFeUJF3noxD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-02_6cfca5122390f57c1b84103d6addf4a0_bkransomware_karagany
Files
-
2024-05-02_6cfca5122390f57c1b84103d6addf4a0_bkransomware_karagany.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ