Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-30_16c3990878ca03294c73bd21ca3d3229_bkransomware.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-30_16c3990878ca03294c73bd21ca3d3229_bkransomware.exe
Resource
win10v2004-20240226-en
Target
2024-05-30_16c3990878ca03294c73bd21ca3d3229_bkransomware
Size
231KB
MD5
16c3990878ca03294c73bd21ca3d3229
SHA1
3cdca1ea7d6ef9f9e402f44944a7aaf719974ca0
SHA256
9f9427c210a01f3ef1352b043eef2aa1fd331eef6df15e8dba8b11dc5fe1e1c2
SHA512
06281a35ed6c49f2c4eacdd368d998a57aaec125a1ef4c001af0b07e937cc032ba7f5e624b25119356f2578db9c8d8c7e2fc8807b5484dc8bfa5aecd276d1ca3
SSDEEP
6144:Mp8IFqqtSHFFYbnWhKIo5oFgwIiTB2Vn6:s8I0qtSHFFYbwKN2FMiTA6
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
F:\mb\开发源码\内网版\中间件\多线程\v3.8\3.8.0\3.8.0.11\Release\usbshsrv.pdb
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateMutexA
ReleaseMutex
CreateFileA
DeviceIoControl
FreeLibrary
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetCurrentProcessId
CloseHandle
CreateThread
WriteFile
ReadFile
GetOverlappedResult
Process32First
GetFileAttributesA
CreateProcessA
Process32Next
CreateToolhelp32Snapshot
CreateSemaphoreA
FormatMessageA
CreateEventA
WaitForMultipleObjects
WaitForSingleObject
OutputDebugStringA
GetLocalTime
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetModuleFileNameA
CreateDirectoryW
GetFileAttributesExW
SetEnvironmentVariableA
ReadConsoleW
SetEndOfFile
CreateFileW
HeapSize
GetTimeZoneInformation
WriteConsoleW
SetStdHandle
LCMapStringW
CompareStringW
GetStringTypeW
OutputDebugStringW
LoadLibraryExW
SetFilePointerEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetFileType
RtlUnwind
FindNextFileW
FindFirstFileExW
DeleteFileW
DeleteCriticalSection
GetConsoleMode
GetConsoleCP
RaiseException
FlushFileBuffers
GetLastError
Sleep
HeapFree
HeapAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
HeapReAlloc
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FindClose
GetCommandLineA
EncodePointer
DecodePointer
GetProcessHeap
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
GetModuleFileNameW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
LookupPrivilegeValueA
RegOpenKeyExA
AdjustTokenPrivileges
RegQueryValueExA
OpenProcessToken
freeaddrinfo
getnameinfo
recvfrom
sendto
WSAStartup
ntohl
htonl
ioctlsocket
connect
inet_addr
ntohs
recv
send
getsockopt
htons
setsockopt
WSACleanup
bind
socket
closesocket
listen
accept
gethostbyname
shutdown
getaddrinfo
select
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
GetAdaptersInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ