2024-09-02_cc38e53f12234b6fc1f8e756a66d1221_bkransomware | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-02_cc38e53f12234b6fc1f8e756a66d1221_bkransomware
Size

2.4MB
MD5

cc38e53f12234b6fc1f8e756a66d1221
SHA1

d5152e89a5ca96a50cfe46dee901296ba8fde845
SHA256

cc7871b24281223e86b2b82b6f9657a4746f2b1940221ea731635b215b16f326
SHA512

afd1700cef862a7199d3351bc4df0c3670eb1d5401115ad65dd87f965388595ab633bbb86c53f889bd9b96bf9a7b395f8bfda2a4fd18a524efb1c5cfd2d07f6f
SSDEEP

49152:qVc8MNFT5Vc8MNFdV7uNRXNxDwnNTBRJJ8y5crG6/4MnYYJ2ZhqSGLHkJEMo/IaW:qVcHVcZ4R9x8f88IDQwIabjKoh9WsY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-02_cc38e53f12234b6fc1f8e756a66d1221_bkransomware

Files

2024-09-02_cc38e53f12234b6fc1f8e756a66d1221_bkransomware
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ