2024-08-28_37db54ec49896b352cd4ee802f14b5c2_bkransomware | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-28_37db54ec49896b352cd4ee802f14b5c2_bkransomware
Size

202KB
MD5

37db54ec49896b352cd4ee802f14b5c2
SHA1

fa3aa04f361980e75bc8604aea25e4182bdc93c3
SHA256

9bb23a0c9f15c90b191d851e8dec1e1d4bbca39eeee8b596ff3f1fa09a189856
SHA512

50976831113fd41865a42efed98b5423b02ece991e293ea993cb4e6d2a9c53a3242d5a3f979bd15c3fc5f330165579ec17b89e05f58181e1de5785961a1d8299
SSDEEP

3072:8dwfzOWrcyh/WrByDQuna4MDdfj2lnMkYWIb1orfp/TsdnFvkaa6x/b4ihvNasgC:8GOWvJRv7lTUpa64DC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-28_37db54ec49896b352cd4ee802f14b5c2_bkransomware

Files

2024-08-28_37db54ec49896b352cd4ee802f14b5c2_bkransomware
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 327KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ