2024-08-13_2804eae82b82e543c14ef048bb5b6a07_bkransomware_metamorfo | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-13_2804eae82b82e543c14ef048bb5b6a07_bkransomware_metamorfo
Size

5.0MB
MD5

2804eae82b82e543c14ef048bb5b6a07
SHA1

cbdd5d9cee699800e15ae47e446c655a2a0b27d3
SHA256

827d4d0cfafb39217ee1b965118c1453a83ae214e69f025b29184c6bb7d052cd
SHA512

9acbd548fc7ca00d8f6305910a9ec8b4069e740d3a406011163235cd8a12a2325eaf476b197782c6182641af6d00e7bf99de1dc78074cf0f43fc7b140b21e354
SSDEEP

98304:bHIBLHHT9D9c60WvBLF+9AyMJ7zow+Fc5OSpY9v8aL30Bg09HF5yEyvpg8zLqoQS:bIBHHRD70Wtyk7SFTv5LkBbEESr1QS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-13_2804eae82b82e543c14ef048bb5b6a07_bkransomware_metamorfo

Files

2024-08-13_2804eae82b82e543c14ef048bb5b6a07_bkransomware_metamorfo
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 703KB - Virtual size: 703KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Aput
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ