2024-10-12_1caea103a81c99188ce3de9bd6d4d56f_darkgate_ransomlock | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-12_1caea103a81c99188ce3de9bd6d4d56f_darkgate_ransomlock
Size

600KB
MD5

1caea103a81c99188ce3de9bd6d4d56f
SHA1

352c259696d893543ab953bbf8edac77f9a6caef
SHA256

abe4acba65cfcce42711059f5ee8c41713df32d10147a491c3fc705b40835a5e
SHA512

28e25f5da1afd7f45f36f756a751b7d39fe807b9fd4728da3012e3f307c21e70c138a2448069577981a1bcf52c33295cd92540359c906f34e0ae5b580065abf9
SSDEEP

12288:QMSU4joci8M6PW1GVFeFd60DFUyheRYM1d:PSUCpM2W1GvgmyeRv1d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-12_1caea103a81c99188ce3de9bd6d4d56f_darkgate_ransomlock

Files

2024-10-12_1caea103a81c99188ce3de9bd6d4d56f_darkgate_ransomlock
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 339KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ