2024-05-30_c7fbc81c96b3801d989a049e47d4a2e8_bkransomware | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-30_c7fbc81c96b3801d989a049e47d4a2e8_bkransomware
Size

2.0MB
MD5

c7fbc81c96b3801d989a049e47d4a2e8
SHA1

009380199d9147193e0272e58ec5a65cd5ab8702
SHA256

1d3c9f2304b53a24418c42e6f469905c6fa272550464c2d4b8ff892b0d6adc9d
SHA512

5d4b818acb92bd9395a56d942801953f3632c707178d09ce359aa3bfe717010eac938e42e5c4f26b9a255a7089819bf4b6da07f253476fc2a815a42580762d21
SSDEEP

24576:j+ysi/6447VrRoNk7BZpMss86TYJJJNK/Ry5D96H0:qysV7VrRokpMss1TCJJ8y5EH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-30_c7fbc81c96b3801d989a049e47d4a2e8_bkransomware

Files

2024-05-30_c7fbc81c96b3801d989a049e47d4a2e8_bkransomware
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ