2024-09-27_a10a941af1793fdf5ff71b28f1c6bd23_ransomlock | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-27_a10a941af1793fdf5ff71b28f1c6bd23_ransomlock
Size

73KB
MD5

a10a941af1793fdf5ff71b28f1c6bd23
SHA1

b81af56523a8f378b711ec587655be17a2a1e5a4
SHA256

a06a7af8bef6f227baef1f929b6aa3ee52ed00047577910773e5a06ec1006e54
SHA512

68dcf50593ae241eab8541c64cb8635eaa0c94910d8a6e7b8689e18403330c64ec7a4f344356c742177911728aa8c2ecb7840010b97f73e07a6ce75e15788313
SSDEEP

768:QBKJYmiiqTfk2AMRGwlFgOrjsHmiiqTfk2AMRGwlFgOrjsU:QBMYpTfDbGwlF9nsHpTfDbGwlF9nsU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-27_a10a941af1793fdf5ff71b28f1c6bd23_ransomlock

Files

2024-09-27_a10a941af1793fdf5ff71b28f1c6bd23_ransomlock
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 770B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ