2024-06-06_81dda79704f08a63a0270680f6b0cb38_bkransomware | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-06_81dda79704f08a63a0270680f6b0cb38_bkransomware
Size

2.2MB
MD5

81dda79704f08a63a0270680f6b0cb38
SHA1

1b96815faf74db5017b26ee16d8a0e28ed6bb25c
SHA256

cbbd520a881a473392e3db634e4f319776f5ca778930a12f4927e70341e2471a
SHA512

36302e4a92115c47f273d2cbe7d8b66018325d7438e71ac4c43eceda5765af83eaa942fdbc402fcc44033dd527728ade25915f9c5d6372786b2474c09505da68
SSDEEP

49152:qVc8MNFLpoJdXN0BMd923Uv39v9M/rZvD3k1yIgekI:qVc8JdXN0Be+092S0ekI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-06_81dda79704f08a63a0270680f6b0cb38_bkransomware

Files

2024-06-06_81dda79704f08a63a0270680f6b0cb38_bkransomware
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ