2024-06-02_13589c93e675fd6d5eb5d81dff782ca9_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-02_13589c93e675fd6d5eb5d81dff782ca9_bkransomware
Size

2.5MB
MD5

13589c93e675fd6d5eb5d81dff782ca9
SHA1

a7c85bc2db337ee5b562e57aad3a67b991bf034c
SHA256

41ee72a0239d46a2fc880a9e9178d2d844151583104779ffbe14617dfffd3d61
SHA512

ada586802001075c7f5d38c466516aa1ea534640203e18306e3e58839843dc61c6de2d153072bc3f4871f6865d3f302c3cad1f347c3fc47514d94fc7480308ba
SSDEEP

49152:SCmJFAuqxyMcHGybup5DYzS79GX2UUSI4Y7mTAdfNjjp3ChU2jbTr:SdJBbGybupdYw9GGUUSkmUdfNjj9ChU2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-02_13589c93e675fd6d5eb5d81dff782ca9_bkransomware

Files

2024-06-02_13589c93e675fd6d5eb5d81dff782ca9_bkransomware
.exe windows:5 windows x86 arch:x86

456a34e8898dcb7e6af7f109153e3057

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
InterlockedExchange
CompareStringA
LoadLibraryA
GetCurrentThreadId
MapViewOfFile
ResetEvent
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetLocalTime
GetFileTime
WaitForMultipleObjects
TerminateThread
Sleep
GetExitCodeProcess
TerminateProcess
GetHandleInformation
GetVersion
GetCurrentProcessId
GetTickCount
DeviceIoControl
SetFilePointer
ReadFile
WriteFile
GetFileSize
SetLastError
GlobalFree
GlobalUnlock
GlobalLock
GlobalReAlloc
GlobalAlloc
FindClose
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentThread
RaiseException
GetCurrentProcess
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
LocalFree
DecodePointer
UnmapViewOfFile
CloseHandle
SizeofResource
LoadResource
WaitForSingleObject
ReleaseMutex
SetEnvironmentVariableA
GetConsoleCP
GetTimeZoneInformation
GetOEMCP
GetACP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
QueryPerformanceCounter
GetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
SetStdHandle
GetModuleHandleExW
ExitProcess
ExitThread
CreateThread
GetSystemTimeAsFileTime
GetFileType
GetConsoleMode
SetFilePointerEx
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
GetCommandLineW
VerifyVersionInfoW
VerSetConditionMask
SetErrorMode
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetThreadLocale
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
FlushFileBuffers
SystemTimeToFileTime
SetFileTime
LocalFileTimeToFileTime
GetFileSizeEx
LeaveCriticalSection
EnterCriticalSection
FreeResource
VirtualProtect
GlobalDeleteAtom
ResumeThread
SuspendThread
SetThreadPriority
EncodePointer
OutputDebugStringA
lstrcmpA
FileTimeToLocalFileTime
MulDiv
GlobalSize
ExpandEnvironmentStringsA
SetEvent
GetLastError
FreeLibrary
LockResource

advapi32

StartServiceW
RegQueryValueExA
RegOpenKeyExA
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
RegCloseKey
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenThreadToken
OpenProcessToken

user32

SetWindowRgn
IsIconic
GetSystemMetrics
GetSystemMenu
DrawIcon
GetClientRect
GetCursorPos
GetKeyState
InvalidateRect
GetFocus
SetCapture
ReleaseCapture
UpdateWindow
GetWindowRect
ScreenToClient
DrawFocusRect
IntersectRect
GetWindow
MapDialogRect
GetSysColor
FillRect
FrameRect
CopyRect
DestroyIcon
DrawIconEx
GetSubMenu
ChildWindowFromPointEx
GetDC
ReleaseDC
ClientToScreen
IsRectEmpty
SetTimer
KillTimer
SetActiveWindow
GetDesktopWindow
SetCursor
BringWindowToTop
EnumWindows
GetWindowThreadProcessId
SetWindowPos
IsWindowVisible
GetParent
SetFocus
OpenDesktopW
SwitchDesktop
CopyImage
DrawEdge
DrawMenuBar
EnableMenuItem
EnableScrollBar
GetMenuState
GetMenuItemID
GetMenuItemCount
RemoveMenu
UnhookWindowsHookEx
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
TranslateMessage
GetActiveWindow
ValidateRect
CallNextHookEx
PostQuitMessage
ShowOwnedPopups
IsWindowEnabled
GetLastActivePopup
ShowWindow
GetDlgItem
GetAsyncKeyState
GetCapture
SetWindowContextHelpId
GetWindowDC
BeginPaint
EndPaint
DestroyMenu
InflateRect
GetMessagePos
GetMessageTime
IsWindow
IsChild
DestroyWindow
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgCtrlID
GetMenu
SetMenu
TrackPopupMenu
GetForegroundWindow
SetForegroundWindow
RedrawWindow
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
AdjustWindowRectEx
MapWindowPoints
EqualRect
PtInRect
GetTopWindow
SetScrollInfo
GetScrollInfo
MonitorFromWindow
MoveWindow
CheckDlgButton
CreateDesktopW
GetNextDlgTabItem
SendDlgItemMessageA
DeleteMenu
GetSysColorBrush
RealChildWindowFromPoint
MessageBeep
SetRect
WaitMessage
WindowFromPoint
OffsetRect
InvalidateRgn
GetNextDlgGroupItem
CreatePopupMenu
SetRectEmpty
UnpackDDElParam
ReuseDDElParam
GetMenuDefaultItem
GetIconInfo
HideCaret
InvertRect
NotifyWinEvent
UnionRect
SetParent
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawFrameControl
EndDialog
IsMenu
UpdateLayeredWindow
MonitorFromPoint
TrackMouseEvent
GetComboBoxInfo
IsZoomed
GetKeyboardLayout
LockWindowUpdate
ToUnicodeEx
GetKeyboardState
DestroyAcceleratorTable
SetCursorPos
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
TranslateMDISysAccel
GetUpdateRect
SubtractRect
CreateMenu
DestroyCursor
GetWindowRgn
CloseDesktop
GetThreadDesktop
GetUserObjectInformationW

gdi32

PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetBkMode
GetViewportExtEx
SetMapMode
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
LineTo
IntersectClipRect
SetLayout
GetWindowExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
SetStretchBltMode
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
GetBoundsRect
FillRgn
SetPaletteEntries
ExtFloodFill
SetPixelV
PtInRegion
FrameRgn
RoundRect
CreateRoundRectRgn
OffsetRgn
Rectangle
Polyline
Polygon
CreatePolygonRgn
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
SetPixel
GetTextCharsetInfo
GetPaletteEntries
GetNearestPaletteIndex
GetRgnBox
GetTextColor
GetBkColor
DPtoLP
SetRectRgn
GetMapMode
CombineRgn
PatBlt
CreateRectRgnIndirect
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreatePalette
DeleteDC
DeleteObject
GetDeviceCaps
GetDIBits
GetStockObject
GetSystemPaletteEntries
RealizePalette
SelectObject
SelectPalette
SetDIBitsToDevice
StretchBlt
StretchDIBits
CreateSolidBrush
SetViewportOrgEx
SetViewportExtEx
MoveToEx

shell32

SHAppBarMessage
DragFinish
SHAddToRecentDocs
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc

shlwapi

PathFileExistsW
PathIsDirectoryW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW

msimg32

TransparentBlt
AlphaBlend

comctl32

ord17
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIcon

uxtheme

DrawThemeText
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeColor
GetCurrentThemeName
GetThemePartSize
IsAppThemed
GetThemeSysColor
GetWindowTheme
DrawThemeBackground

ole32

CoTaskMemAlloc
CoTaskMemFree
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoRevokeClassObject
OleFlushClipboard
OleDuplicateData
CoRegisterMessageFilter
CreateStreamOnHGlobal
DoDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
ReleaseStgMedium
CoUninitialize
CoCreateGuid
CoCreateInstance
CoInitialize
CLSIDFromString
CLSIDFromProgID
CoInitializeEx
CoDisconnectObject
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
CreateILockBytesOnHGlobal

oleaut32

SysAllocString
SysAllocStringLen
VariantInit
VarBstrFromDate
OleCreateFontIndirect
VariantClear
VariantChangeType
LoadTypeLi
SysStringLen
SysFreeString
SystemTimeToVariantTime
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime

gdiplus

GdipDrawImageRectI
GdiplusShutdown
GdipSetInterpolationMode
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winspool.drv

ClosePrinter

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 407KB - Virtual size: 407KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

456a34e8898dcb7e6af7f109153e3057

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

shell32

shlwapi

msimg32

comctl32

uxtheme

ole32

oleaut32

gdiplus

imm32

winspool.drv

oleacc

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 407KB - Virtual size: 407KB

.data Size: 30KB - Virtual size: 61KB

.rsrc Size: 43KB - Virtual size: 42KB

.reloc Size: 150KB - Virtual size: 150KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 407KB - Virtual size: 407KB

.data
Size: 30KB - Virtual size: 61KB

.rsrc
Size: 43KB - Virtual size: 42KB

.reloc
Size: 150KB - Virtual size: 150KB