Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-04_3e44e2e8d057fe583b64ca35b14400e5_bkransomware.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-06-04_3e44e2e8d057fe583b64ca35b14400e5_bkransomware.exe
Resource
win10v2004-20240426-en
Target
2024-06-04_3e44e2e8d057fe583b64ca35b14400e5_bkransomware
Size
1.5MB
MD5
3e44e2e8d057fe583b64ca35b14400e5
SHA1
65400870190869a70a204d27a9f55396bb7c03fe
SHA256
e13a6a6cacc72ec5c02aec94e6ac850fc7b1c7dfe747601dac857f97c5e28afe
SHA512
9699ce6ebe305e1b27cdb074c61aaf9550298e88e2bd64d3645558fb5a1699cc10021b245b66922291dec1c34f55c9bd2bec183b247470bb52f053a24add0f05
SSDEEP
49152:5fqq3QuoCzF7zYQlOFoXLSl4bYtgSEXmJL:PzviayeSAa
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\6wanGameHall\build\Release\6wanGame.pdb
??1CDownloader@@QAE@XZ
?GetDownloadURL@NetTool@@SA_NPB_WPAPAXPAJJH@Z
Net_GetContentLength
?PostForm@NetTool@@SAHPB_W0PADJ@Z
SetDocsParam
?StartChangeHost@CSingleHostCGI@@QAE_NPADI@Z
?GetThis@CSingleHostCGI@@SAPAV1@XZ
?IsStartChangeHost@CSingleHostCGI@@QAE_NXZ
PostDocs
??0CDownloader@@QAE@PB_W@Z
?SetURL@CDownloader@@QAEXPB_W00@Z
?Download@CDownloader@@QAEXXZ
?WaitThread@CDownloader@@QAEXXZ
?IsFinished@CDownloader@@QAE_NXZ
?GetLastTime@CDownloader@@QAEAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?Abort@CDownloader@@QAEXXZ
?DownloadURL@NetTool@@SA_NPB_W0J@Z
?Clear@CDownloader@@QAEXXZ
cef_string_utf8_to_utf16
cef_string_utf16_set
cef_post_task
cef_currently_on
cef_string_utf16_clear
cef_log
cef_v8value_create_function
cef_v8value_create_string
cef_v8value_create_double
cef_v8value_create_int
cef_v8value_create_null
cef_browser_host_create_browser
cef_request_context_create_context
cef_string_list_free
cef_string_list_alloc
cef_string_userfree_utf16_free
cef_string_utf16_cmp
cef_string_utf16_to_utf8
cef_string_utf8_clear
cef_execute_process
cef_initialize
cef_shutdown
cef_run_message_loop
cef_enable_highdpi_support
cef_string_list_copy
cef_string_multimap_free
cef_string_multimap_alloc
cef_string_map_free
cef_string_map_alloc
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_cookie_manager_create_manager
cef_api_hash
HeapAlloc
ExitThread
HeapFree
EncodePointer
GetCommandLineW
GetFileAttributesA
FlushFileBuffers
GetTempPathW
LockFileEx
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
GetTempPathA
AreFileApisANSI
DeleteFileA
LocalAlloc
FormatMessageW
VirtualFree
VirtualAlloc
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
ReadConsoleW
SetFilePointerEx
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
RtlUnwind
HeapSize
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStartupInfoW
GetFileType
GetStdHandle
GetProcessHeap
GetModuleHandleExW
ExitProcess
HeapReAlloc
IsProcessorFeaturePresent
InterlockedDecrement
CreateFileW
ReadFile
WriteFile
CloseHandle
lstrlenW
DebugBreak
OutputDebugStringW
lstrlenA
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
GetFileSize
lstrcatA
GetFileAttributesExW
GlobalAlloc
GlobalLock
GlobalUnlock
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
RaiseException
CreateDirectoryW
GetModuleFileNameW
SetEnvironmentVariableW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteFileW
Sleep
CreateThread
LoadLibraryW
GetProcAddress
FreeLibrary
CreateEventW
WaitForSingleObject
lstrcpyW
SetEvent
WritePrivateProfileStringW
CreateProcessW
GlobalFree
GetVersionExW
GetModuleHandleW
DisconnectNamedPipe
ConnectNamedPipe
CreateNamedPipeW
WaitForMultipleObjects
GetOverlappedResult
GetFileAttributesW
GetPrivateProfileIntW
FindResourceW
LoadResource
LockResource
GetCurrentThreadId
SetLastError
GetCurrentProcess
FlushInstructionCache
MulDiv
lstrcmpW
GetTickCount
GetCurrentProcessId
TerminateProcess
lstrcatW
GetLocalTime
GlobalHandle
TerminateThread
LocalFree
GetPrivateProfileStringW
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Module32FirstW
OpenEventW
GetDriveTypeW
GetLogicalDriveStringsW
DecodePointer
lstrcmpiW
LoadLibraryExW
SizeofResource
DeviceIoControl
ResetEvent
GetSystemTime
FindFirstFileW
FindNextFileW
FindClose
GetFullPathNameW
GetFullPathNameA
CreateFileA
SetFilePointer
SetEndOfFile
QueryPerformanceCounter
InterlockedCompareExchange
UnlockFile
LockFile
GetSystemTimeAsFileTime
FormatMessageA
IsDebuggerPresent
SetWindowPos
DestroyCursor
CharLowerW
SetLayeredWindowAttributes
EnableMenuItem
GetClipboardData
IsClipboardFormatAvailable
GetCaretPos
LoadMenuW
GetMenuState
GetMenuStringW
GetMenuItemID
GetKeyState
CreateMenu
CreatePopupMenu
GetMenuItemCount
EnumChildWindows
TrackMouseEvent
IntersectRect
EnableWindow
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
FindWindowW
WaitForInputIdle
SetMenuItemInfoW
FindWindowExW
OffsetRect
PtInRect
SetWindowRgn
IsMenu
CharNextW
LoadStringW
wsprintfA
PostMessageW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
UnregisterClassW
SetTimer
KillTimer
PostThreadMessageW
PeekMessageW
GetMessageW
DestroyIcon
DrawIconEx
PrivateExtractIconsW
SetCursor
GetWindowRect
GetActiveWindow
DestroyMenu
EndDialog
GetWindow
SetWindowContextHelpId
MapDialogRect
CreateWindowExW
RegisterClassExW
LoadCursorW
DefWindowProcW
SetWindowLongW
GetWindowLongW
DestroyAcceleratorTable
GetDesktopWindow
ReleaseDC
GetDC
InvalidateRect
CallWindowProcW
InvalidateRgn
GetClientRect
FillRect
ReleaseCapture
SetCapture
MoveWindow
ScreenToClient
GetParent
ClientToScreen
CreateAcceleratorTableW
DestroyWindow
GetClassInfoExW
RedrawWindow
GetSysColor
GetClassNameW
IsWindow
SendMessageW
GetDlgItem
SetFocus
GetFocus
IsChild
EndPaint
BeginPaint
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
RegisterWindowMessageW
ShowWindow
SetWindowsHookExW
LoadIconW
CallNextHookEx
SystemParametersInfoW
GetSystemMetrics
CopyRect
PostQuitMessage
UnhookWindowsHookEx
GetCursorPos
WindowFromPoint
GetWindowThreadProcessId
DeleteMenu
AppendMenuW
TrackPopupMenu
GetSubMenu
GetMenuItemInfoW
ModifyMenuW
MessageBoxW
SetForegroundWindow
IsWindowVisible
wsprintfW
DialogBoxIndirectParamW
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyW
GetFileSecurityW
ConvertSecurityDescriptorToStringSecurityDescriptorW
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetFileSecurityW
RegQueryInfoKeyW
RegEnumKeyExW
StringFromCLSID
CoTaskMemRealloc
CoCreateGuid
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CoCreateInstance
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
OleLockRunning
SHGetSpecialFolderPathW
ShellExecuteW
Shell_NotifyIconW
SysStringLen
SysAllocStringLen
OleCreateFontIndirect
LoadRegTypeLi
SysAllocString
VariantClear
VariantInit
VarUI4FromStr
SysFreeString
LoadTypeLi
PathFileExistsW
ord17
ord16
_TrackMouseEvent
InitCommonControlsEx
CreateRoundRectRgn
CombineRgn
CreateRectRgn
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
BitBlt
DeleteDC
GetStockObject
GetObjectW
GetDeviceCaps
CreateFontIndirectW
GetTextExtentPoint32W
SelectObject
WSAStartup
WSACleanup
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetProcessMemoryInfo
GdipDrawRectangleI
GdipDeletePen
GdipCreatePen1
GdipReleaseDC
GdipGetDC
GdipSetSolidFillColor
GdipTranslateWorldTransform
GdiplusShutdown
GdiplusStartup
GdipCreateFromHWND
GdipBitmapGetPixel
GdipCreateHBITMAPFromBitmap
GdipCreateFromHDC
GdipSetStringFormatTrimming
GdipCreateBitmapFromFile
GdipCreateBitmapFromHICON
GdipDrawImageRectI
GdipFillRectangleI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipImageGetFrameDimensionsList
GdipSetPenColor
GdipDisposeImage
GdipMeasureString
GdipDrawString
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipCloneBrush
GdipAlloc
GdipFree
GdipDeleteBrush
GdipCreateSolidFill
GdipDeleteFont
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipDrawImageRectRectI
GdipGetImageHeight
GdipGetImageWidth
GdipImageGetFrameCount
GdipLoadImageFromFile
GdipImageSelectActiveFrame
GdipDrawLineI
GdipCloneImage
GdipImageGetFrameDimensionsCount
GdipAddPathArcI
GdipClosePathFigure
GdipFillPath
GdipCreateBitmapFromHBITMAP
GdipCreatePath
GdipDeletePath
GdipStartPathFigure
GdipCreateBitmapFromScan0
GdipAddPathLineI
GdipDrawImagePointsRectI
GdipSetPenDashStyle
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipDrawPath
?SetAttribute@TiXmlElement@@QAEXPBD0@Z
?SetAttribute@TiXmlElement@@QAEXPBDH@Z
?Attribute@TiXmlElement@@QBEPBDPBD@Z
?CopyTo@TiXmlElement@@QBEXPAV1@@Z
??0TiXmlDocument@@QAE@XZ
??1TiXmlDocument@@UAE@XZ
?LoadFile@TiXmlDocument@@QAE_NPBDW4TiXmlEncoding@@@Z
?RootElement@TiXmlDocument@@QAEPAVTiXmlElement@@XZ
?SaveFile@TiXmlDocument@@QBE_NPBD@Z
?Print@TiXmlElement@@UBEXPAU_iobuf@@H@Z
?Parse@TiXmlElement@@UAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?ToDocument@TiXmlNode@@UAEPAVTiXmlDocument@@XZ
?ToDocument@TiXmlNode@@UBEPBVTiXmlDocument@@XZ
??1TiXmlElement@@UAE@XZ
?ToElement@TiXmlElement@@UBEPBV1@XZ
?ToComment@TiXmlNode@@UAEPAVTiXmlComment@@XZ
?ToComment@TiXmlNode@@UBEPBVTiXmlComment@@XZ
?ToUnknown@TiXmlNode@@UAEPAVTiXmlUnknown@@XZ
?ToUnknown@TiXmlNode@@UBEPBVTiXmlUnknown@@XZ
?ToText@TiXmlNode@@UAEPAVTiXmlText@@XZ
?ToText@TiXmlNode@@UBEPBVTiXmlText@@XZ
?ToDeclaration@TiXmlNode@@UAEPAVTiXmlDeclaration@@XZ
?ToDeclaration@TiXmlNode@@UBEPBVTiXmlDeclaration@@XZ
?Clone@TiXmlElement@@UBEPAVTiXmlNode@@XZ
?Accept@TiXmlElement@@UBE_NPAVTiXmlVisitor@@@Z
?StreamIn@TiXmlElement@@MAEXPAV?$basic_istream@DU?$char_traits@D@std@@@std@@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
??0TiXmlElement@@QAE@PBD@Z
?RemoveChild@TiXmlNode@@QAE_NPAV1@@Z
?LinkEndChild@TiXmlNode@@QAEPAV1@PAV1@@Z
?Value@TiXmlNode@@QBEPBDXZ
?NextSiblingElement@TiXmlNode@@QAEPAVTiXmlElement@@XZ
?FirstChildElement@TiXmlNode@@QAEPAVTiXmlElement@@XZ
?ToElement@TiXmlElement@@UAEPAV1@XZ
PlaySoundW
FindNextUrlCacheEntryW
DeleteUrlCacheEntryW
FindFirstUrlCacheEntryW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ