2024-07-23_44017ba7830e009e9319c6e175b30f7d_bkransomware | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-23_44017ba7830e009e9319c6e175b30f7d_bkransomware
Size

6.7MB
MD5

44017ba7830e009e9319c6e175b30f7d
SHA1

516739bbcd5f617791dab243cabce487b0fde9a7
SHA256

af088eb7e9c046ef910658b881d580bead50bdae524beddbbf29f433d6fd36e2
SHA512

71036aacf1883b452244337637ea92d87fefd07c5f5c6886dab74985d5f823c25f3a76b503fb64243793520fd7f2f40c3a33d48d97b8857568ab0fbded99f138
SSDEEP

196608:mykLMUY/rh6xqTiHr7rWVIErj8WoI43NnD/HPisz8fypz:j8srh6QTer7J35Pwq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-23_44017ba7830e009e9319c6e175b30f7d_bkransomware

Files

2024-07-23_44017ba7830e009e9319c6e175b30f7d_bkransomware
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 667KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ