2024-07-25_b84ba695c365fe3d6793b161b4954492_bkransomware | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-25_b84ba695c365fe3d6793b161b4954492_bkransomware
Size

5.1MB
MD5

b84ba695c365fe3d6793b161b4954492
SHA1

019f9afed9cc8800524a1e079486c875f8596246
SHA256

5bf377966cc921a7c1b233db38806972ba3d09824d4fa9432e351220090dba2b
SHA512

d0a94da6813eb563cd534c290bea8ba73ecb3d78c8f4efb56185b797d75a5d4176253d18b9722eddfc1bfc8225f5e55fb7625c308dd77b0ecbc9d55759a4fc63
SSDEEP

98304:5M5bkT/Q0YUMCk9N9O6hvjH7OcYXqJ4A1UxYyBpauFABFLOAkGkzdnEVomFHKnPo:5ox3Xtz5UxYyDkFLOyomFHKnPo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-25_b84ba695c365fe3d6793b161b4954492_bkransomware

Files

2024-07-25_b84ba695c365fe3d6793b161b4954492_bkransomware
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 528KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ