2024-08-28_c162b4b1d4e8009662b88aee74c9f396_bkransomware | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-28_c162b4b1d4e8009662b88aee74c9f396_bkransomware
Size

859KB
MD5

c162b4b1d4e8009662b88aee74c9f396
SHA1

b9b8eb6bea2082aba2be5e3e771b211b26cf160d
SHA256

283152a030f6f0660fc2010e80a64352c6366fb4c2578a2e8fecc269101a11d0
SHA512

f0361ffc59516f5fcaf40fa7932a7b080981e87932ef068d182e80b69979f925a23c4e666a15207fcfa3c9a3c01f747dd8dd062ec6e039ec781bdbb8d8962136
SSDEEP

12288:G85bM3npxYfj63hgD1RVSwM+s85bM3npxYfj63hgD1ZiL:A3npi63cVNM+e3npi63iC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-28_c162b4b1d4e8009662b88aee74c9f396_bkransomware

Files

2024-08-28_c162b4b1d4e8009662b88aee74c9f396_bkransomware
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\DCB\CBT_Main\Acrobat\Installers\BootStrapExe_Small\Release\Setup.pdb

Sections

.text
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ