2024-05-27_e92a08da2c94be87753fa8bc9fd4d66e_bkransomware | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-27_e92a08da2c94be87753fa8bc9fd4d66e_bkransomware
Size

458KB
MD5

e92a08da2c94be87753fa8bc9fd4d66e
SHA1

6b6a99e9bfaef539ce5461047d56c718f9a74600
SHA256

31f825200dec58a1334513a9248f7dc1841c6e40faa745e8077198e82b3e7d4b
SHA512

397514a114adbcaf529424ef962e3191fdf0239a208f59a51fe27a62bfa10022a67c3d15fd68fc8464d9d789c07b2631ee0528b05f110334ed27c5affe5ba8d3
SSDEEP

6144:jQ78n5Qw0tneDA/sqhleIc0HftDrkYY1hj63hgDonsogCh6NEpAF8:G85bM3npxYfj63hgD1Zib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-27_e92a08da2c94be87753fa8bc9fd4d66e_bkransomware

Files

2024-05-27_e92a08da2c94be87753fa8bc9fd4d66e_bkransomware
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ