2024-06-29_88a2e5492caff51bf68e734a843651d1_bkransomware | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-29_88a2e5492caff51bf68e734a843651d1_bkransomware
Size

664KB
MD5

88a2e5492caff51bf68e734a843651d1
SHA1

c838bc6cf93cf71ea3df9a3fe204a1703970e2d9
SHA256

a83cb3f4458703229f53f2cbc43f918c63703f00e518c4528fb22346e88081e4
SHA512

48b26ee13dd26ba817fcbc586ac104f5060ed58bb5c8349a28549d9c7a97e50e52d394adf4ab82261a5d79719c95683d441b0ece684ff449ada6cab637b1c4e1
SSDEEP

3072:Ub8PrwatNq1nlhp6B904Enx4MDdfj2lnMkYWIfYxoZWOwZpz74/2lfy5MWc:UAMato1nh0hFxo9wZ9ff7Wc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-29_88a2e5492caff51bf68e734a843651d1_bkransomware

Files

2024-06-29_88a2e5492caff51bf68e734a843651d1_bkransomware
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 325KB - Virtual size: 334KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE