2024-07-27_41e71c568dbc800dda289922faf619f2_bkransomware | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-27_41e71c568dbc800dda289922faf619f2_bkransomware
Size

458KB
MD5

41e71c568dbc800dda289922faf619f2
SHA1

dc5590c5594e3fbab8ca280230746a3440212a28
SHA256

c004012da262e4ed176b6864ad761dac680578e22afdf43af41ac586ea1c6867
SHA512

1446e5408df2cf2e24150f83ea19bcd09bbcd247357c5e7dd5573adc50c24149629d72067edbe75893a91c0a219ec2a14d9b4bf97169a8335d782b52f0a1ffe3
SSDEEP

6144:jQ78n5Qw0tneDA/sqhleIc0HftDrkYY1hj63hgDonsogCh6NEpAFA:G85bM3npxYfj63hgD1Zi3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-27_41e71c568dbc800dda289922faf619f2_bkransomware

Files

2024-07-27_41e71c568dbc800dda289922faf619f2_bkransomware
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ