2024-05-24_3fda1069b8c6d150c2208762fa8b3655_bkransomware | Triage

Sharing

General

Target

2024-05-24_3fda1069b8c6d150c2208762fa8b3655_bkransomware
Size

2.6MB
MD5

3fda1069b8c6d150c2208762fa8b3655
SHA1

c84380131ce9c35dca94bf43b9941ca632ee8299
SHA256

480099fdc68ad0231ae5c5f56886a8b1aef5af36445bb75a21eb37594e0fc962
SHA512

18d4b372cb94521f7fecf32e507adce36aa60dd9d09c2d9a0ea7ea2de9440348de3d4dbc6ff3d394661cc82e2f694b05f29d09ea20bc323adcf1e3ccae6d8810
SSDEEP

49152:mJJ9ThqnstLet3LyFmUi6AjW/MUSdGRf3/WhKPgssSt2gB:QbqnstLEfjxAZWhv7StX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-24_3fda1069b8c6d150c2208762fa8b3655_bkransomware

Files

2024-05-24_3fda1069b8c6d150c2208762fa8b3655_bkransomware
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ