2024-07-28_2bd11783ebef38ea1e4e38e9497e7966_bkransomware

General

Target
2024-07-28_2bd11783ebef38ea1e4e38e9497e7966_bkransomware
Size 205KB
Sample240728-nvdebswepl
SHA256 ffcab33674b08057b06f95b09386de3cbd90dce3b5c33fb6f1614f1c6ccd023a
MD5 2bd11783ebef38ea1e4e38e9497e7966
SHA1 63c20eef33c2da88f2da83e74b3a2a8b318ec102
SHA512 73e42c88efd31d5c9153231a1cd644e9dd7bebaa0461139c489f04dd98bd68c210d7f8456452c0e1481346a9b945db2c3074674c2b2d2eee376c487465251992
SSDEEP 3072:7gzlmnQjGjtA77nRw3u08PbvZDV/y9afXqTXnCBNcESnrbieOVAS3n/:7i777RwChpy9afajnCBwrbTOP3/
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-28_2bd11783ebef38ea1e4e38e9497e7966_bkransomware

SHA256 ffcab33674b08057b06f95b09386de3cbd90dce3b5c33fb6f1614f1c6ccd023a
MD5 2bd11783ebef38ea1e4e38e9497e7966
SHA1 63c20eef33c2da88f2da83e74b3a2a8b318ec102
SHA512 73e42c88efd31d5c9153231a1cd644e9dd7bebaa0461139c489f04dd98bd68c210d7f8456452c0e1481346a9b945db2c3074674c2b2d2eee376c487465251992
SSDEEP 3072:7gzlmnQjGjtA77nRw3u08PbvZDV/y9afXqTXnCBNcESnrbieOVAS3n/:7i777RwChpy9afajnCBwrbTOP3/
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

39996

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths