Static task
static1
Behavioral task
behavioral1
Sample
2024-08-29_847781aea8e89f67e4c48a5a9ec1c5b5_bkransomware_karagany_metamorfo.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-08-29_847781aea8e89f67e4c48a5a9ec1c5b5_bkransomware_karagany_metamorfo.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-29_847781aea8e89f67e4c48a5a9ec1c5b5_bkransomware_karagany_metamorfo
-
Size
180KB
-
MD5
847781aea8e89f67e4c48a5a9ec1c5b5
-
SHA1
8e76b88a3eac41f942f991ca4663c0916e89d3d4
-
SHA256
47419926042533e900842552fed43a2d051027a7496bf619b7ce2964c35a5062
-
SHA512
a85760648c44cb9259cf73bc5d7e2f3818b802fd31a757421b54afcfe8a31e49c99f867e4aa6c5f7fc0ceb265b591265f530e50f5220c6540f958423e0eb6156
-
SSDEEP
3072:6gzlmnQjGjtA77nRw3u04PbvZDV/y9afXqTXnCBNcESnrbieOVB:6i777Rw2hpy9afajnCBwrbTO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-29_847781aea8e89f67e4c48a5a9ec1c5b5_bkransomware_karagany_metamorfo
Files
-
2024-08-29_847781aea8e89f67e4c48a5a9ec1c5b5_bkransomware_karagany_metamorfo.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ