2024-05-30_1ac25de1fef150a9d38f1d21e4e76022_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-30_1ac25de1fef150a9d38f1d21e4e76022_bkransomware
Size

481KB
MD5

1ac25de1fef150a9d38f1d21e4e76022
SHA1

8e76e78a1f5ffac36a52a8f3b96acca1c06b345f
SHA256

5dbb62c1135ed6a0049789269a7e7e6ad069f9346383a14ba761b7872804611b
SHA512

f795a7092660f148bf2100d183e1d73da6ed8f930a1876c775517df305c5a8fa210f799c339d8dda10fd1fa1dfa822b80792705b53af28c2e3498e806cbba765
SSDEEP

12288:Dh+GEBfJolmJxRHHE6mRsc9gC8NLhPtD6IA19RPNb8Th4Zzh:DsBfJ4OW9RVb8S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-30_1ac25de1fef150a9d38f1d21e4e76022_bkransomware

Files

2024-05-30_1ac25de1fef150a9d38f1d21e4e76022_bkransomware
.exe windows:5 windows x86 arch:x86

fe19725c720b3564577348fd32bb4f52

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
GetStringTypeW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
HeapReAlloc
HeapAlloc
OutputDebugStringW
RtlUnwind
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
LoadLibraryExW
FreeLibrary
SetConsoleCtrlHandler
IsDebuggerPresent
GetCPInfo
GetOEMCP
GetACP
HeapFree
FatalAppExitA
IsValidCodePage
VirtualProtect
EnumSystemLocalesA
WaitCommEvent
LeaveCriticalSection
EnterCriticalSection
CreateSemaphoreW
GetModuleHandleW
SetConsoleCursorPosition
SetWaitableTimer
GetTickCount
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCommandLineA
IsProcessorFeaturePresent
GetLastError
SetLastError
GetCurrentThread
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
CreateFileW

mpr

WNetCancelConnection2A
WNetUseConnectionA
WNetUseConnectionW
WNetConnectionDialog1A

ws2_32

WSAInstallServiceClassA
WSCGetProviderPath
WSASetEvent

ole32

OleQueryLinkFromData
HBITMAP_UserSize
StringFromGUID2
CreateItemMoniker
SNB_UserMarshal
CreateDataCache
HGLOBAL_UserMarshal

comdlg32

ReplaceTextA
ChooseFontW
ChooseColorW
ChooseFontA
GetFileTitleW

winspool.drv

ord211
AddPrintProvidorA
DeletePrinterIC

crypt32

CryptExportPublicKeyInfoEx
CertDuplicateCertificateContext
CryptGetOIDFunctionAddress
CertSetCTLContextProperty
CryptImportPublicKeyInfo

rtutils

TracePrintfA
TracePrintfExA
LogErrorA
TraceDumpExW
RouterGetErrorStringW
LogEventW

user32

CreateIconFromResource

gdi32

GetFontUnicodeRanges
GetEnhMetaFileDescriptionW
GetDeviceCaps

shlwapi

ord158
PathGetArgsW
ord29

imm32

ImmDisableIME

rpcrt4

I_RpcMapWin32Status

winmm

mmioWrite
waveOutSetVolume

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 354KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe19725c720b3564577348fd32bb4f52

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

mpr

ws2_32

ole32

comdlg32

winspool.drv

crypt32

rtutils

user32

gdi32

shlwapi

imm32

rpcrt4

winmm

Sections

.text Size: 92KB - Virtual size: 92KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 354KB - Virtual size: 353KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 92KB - Virtual size: 92KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 354KB - Virtual size: 353KB

.reloc
Size: 5KB - Virtual size: 4KB