2024-05-24_d1854b67ab7b28c321eea14298a5b1c6_bkransomware | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-24_d1854b67ab7b28c321eea14298a5b1c6_bkransomware
Size

144KB
MD5

d1854b67ab7b28c321eea14298a5b1c6
SHA1

37549e039b9678ca5f431596e498cb238ded29c1
SHA256

8d45602730d84a470d570a4ac72b1137ac69123dec04963a49a5091a811ba08b
SHA512

a9508aa4e2188d11578ff13f6578d8daa192e298beffaf3d83e08ab50efa8626f5f2eff9de977b649b1626333da277b5e1c22229b6c0b423f4b25b4b2819c5e5
SSDEEP

3072:U7g8KdqtBU8uU9LkAQnCnLSRmDKpQepdGyteO1+Y1Ox:+7uU9Lw8KpQe5DEx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-24_d1854b67ab7b28c321eea14298a5b1c6_bkransomware

Files

2024-05-24_d1854b67ab7b28c321eea14298a5b1c6_bkransomware
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\xb_bs\pubgbox\out\Release\pubgbox.pdb

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ