Static task
static1
Behavioral task
behavioral1
Sample
2024-10-05_3217e0903fa136739c21ec2649aca7f9_bkransomware.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-05_3217e0903fa136739c21ec2649aca7f9_bkransomware.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-10-05_3217e0903fa136739c21ec2649aca7f9_bkransomware
-
Size
18.3MB
-
MD5
3217e0903fa136739c21ec2649aca7f9
-
SHA1
d7b3ba9b8dafdd9ba004266289528d3d7368d342
-
SHA256
98737c9f62d585fca7b93097ecbfcaa6c54449dee8c7c0b4cf7123537bdffba0
-
SHA512
35603885d8e5e7e1fabe00b5ac3ef3c148cb79547e8e2b6b4d2948e524fd37ae68612c767665ff9c39b3dddaf360b2d68136e97f5f6bd6ea402f3c460d35671d
-
SSDEEP
196608:Ut9uxtiSoWEpGthNaBNum7k2iVfVSUDxOLlhrDxO6uPCEfrI+7NAjtVa/ul:WIwqf2afUUQLo6uPCEf77o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-05_3217e0903fa136739c21ec2649aca7f9_bkransomware
Files
-
2024-10-05_3217e0903fa136739c21ec2649aca7f9_bkransomware.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18.2MB - Virtual size: 18.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE