2024-06-05_7ec49139eb4977af5e4840705abe06ae_bkransomware | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-05_7ec49139eb4977af5e4840705abe06ae_bkransomware
Size

1.7MB
MD5

7ec49139eb4977af5e4840705abe06ae
SHA1

41f820f9ad5f5fa31cb6d972b339b06128e29cc1
SHA256

192e2ee6af14f1a88555684209d3b0d94ac67c00c17fa30f730bce168dbafebe
SHA512

6f401b22df28260eb5c036dfe3514545fd6b1b1f0aa097305ff8eec1b54a6532a0d11f1d59432cc6f85eb36914724bc71cd6d9b6f073b17e326742cc2410deb5
SSDEEP

24576:j+SpI+Sck1p8OMeZclwzA9BzrRoNk7BZpwaewsAju:qSp5Sck1qOMe6zrRokpDlju

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-05_7ec49139eb4977af5e4840705abe06ae_bkransomware

Files

2024-06-05_7ec49139eb4977af5e4840705abe06ae_bkransomware
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ