Static task
static1
Behavioral task
behavioral1
Sample
2024-06-01_b6ea2b4ad16a218831fc589a66d1d522_bkransomware.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-01_b6ea2b4ad16a218831fc589a66d1d522_bkransomware.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-06-01_b6ea2b4ad16a218831fc589a66d1d522_bkransomware
-
Size
1.3MB
-
MD5
b6ea2b4ad16a218831fc589a66d1d522
-
SHA1
cec966fe95fba178f0f87c4e592cc7a3290bab07
-
SHA256
8a192da989dc45f2ab46b8691c4c5d1fe21d60b873ec1f59dd285fb5a084c71c
-
SHA512
a6f605fa8ee7f3997d3f8ba11a03724bc3296ef445c4490ea82510b3d93e6c44df986426c1d7b3a87eea0cfc66518bd5a7b8cd1280aa979aca47ffd322803a4b
-
SSDEEP
12288:jDim7aQEwhT94K7aQEwhT94wHQy5fJ1GLk2muF3Bz3W7shV7CDtOw6Ba8aYeivei:j+bSO3SOwHQy5Sk2DF3tm7s7c6BLw/r6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-01_b6ea2b4ad16a218831fc589a66d1d522_bkransomware
Files
-
2024-06-01_b6ea2b4ad16a218831fc589a66d1d522_bkransomware.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 161KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ