2024-05-08_2318d717130390ae45184df913a92f3e_bkransomware | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-08_2318d717130390ae45184df913a92f3e_bkransomware
Size

2.4MB
MD5

2318d717130390ae45184df913a92f3e
SHA1

bcba04706975fcc8584e2c7d0062a1fc15bc05f2
SHA256

48a59e63002f1b69db7d23eb19f4b12b03db39fb730adc0219ab13d72c54db20
SHA512

eb84f974c69c172aed9a14f387fc856a07d3cbb443d5a9bc6a2363de524ffabe25f48c40e8471908dc74d42cb4fbcc3c3f11f98eedf652d48e52ca5aa2f29721
SSDEEP

49152:H1n/TCGDQiMDpU/Sb8HDWSrbmnidPtrDEKh:Vn/+GDhOcSb8HDhrK8rw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-08_2318d717130390ae45184df913a92f3e_bkransomware

Files

2024-05-08_2318d717130390ae45184df913a92f3e_bkransomware
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 420KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ