2024-06-10_f9a08c6959d27b9edcb157f1938ff8c9_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-10_f9a08c6959d27b9edcb157f1938ff8c9_bkransomware
Size

6.7MB
MD5

f9a08c6959d27b9edcb157f1938ff8c9
SHA1

f57fc4c0780afc65f84b3f1fddd55bdd7519c3e2
SHA256

d052b74c87dd082fa1ccc32b8441e63e433a60c69b21174ccf43f7f134a725e0
SHA512

eabdfc83451aa2523b924f670a5026438dc69ae9c0687b8bf12c9e318e0bbab34862ebc7e39221f140af67cd9622e5e4f9c7881feb7376bb9c4fd31e3b62fe33
SSDEEP

196608:JMkbose8INju/m+EPBRXKQhjFzRDevEu:JgsWUaBRV3RH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-10_f9a08c6959d27b9edcb157f1938ff8c9_bkransomware

Files

2024-06-10_f9a08c6959d27b9edcb157f1938ff8c9_bkransomware
.exe windows:6 windows x86 arch:x86

79aefe9c0aa42ac3e5c03ac993d5f3bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
SetStdHandle
LoadLibraryW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
Sleep
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
GetProcessHeap
FileTimeToLocalFileTime
WinExec
DeviceIoControl
GetThreadLocale
GetTempPathW
SetThreadPriority
lstrcpynW
SizeofResource
GetUserDefaultLangID
VerSetConditionMask
GetDriveTypeW
SetFilePointer
GetFileSize
GetFullPathNameW
SuspendThread
QueryDosDeviceW
GetExitCodeThread
GetCPInfoExW
GetPrivateProfileIntW
ExitThread
GetFileAttributesW
FormatMessageW
ReadProcessMemory
GetLogicalDrives
GetSystemDirectoryW
CompareFileTime
EnumCalendarInfoW
HeapAlloc
HeapSize
WideCharToMultiByte
MultiByteToWideChar
CreateFileW
GetModuleHandleExW
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
CreateThread
LoadLibraryExW
HeapFree
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SignalObjectAndWait
SwitchToThread
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
ExitProcess

user32

CheckDlgButton
GetMessageW
ShowWindow
CreateWindowExW
SendMessageW
UpdateWindow
GetMessageA
GetSystemMenu
CharUpperBuffW
PostQuitMessage
RegisterWindowMessageW
SetCapture
KillTimer
GetMenuItemInfoW
ModifyMenuW
SetScrollRange
GetDoubleClickTime
SetWindowLongA
PeekMessageA
GetClassNameW
EnableMenuItem
ScrollWindow
ValidateRect
SetWindowLongW
EnumChildWindows
RemoveMenu
InsertMenuW
ReleaseCapture
ScrollWindowEx
InsertMenuA
EndPaint
SetCursor
GetWindowRect
IsIconic
MsgWaitForMultipleObjects
IsZoomed
DeleteMenu
CharLowerBuffW
GetDC
GetKeyboardState
SetRect
SetScrollPos
SendDlgItemMessageW
GetDesktopWindow
AppendMenuA
GetDlgItemTextW
DialogBoxParamA
SetMenuItemInfoW
SetDlgItemTextA

gdi32

EndPage
SetTextColor
GetCharacterPlacementW
CreateFontIndirectW
GetDeviceCaps
SetDIBColorTable
GetPaletteEntries
SetMapMode
CreateBrushIndirect
GetCurrentPositionEx
SetPaletteEntries
GetTextExtentExPointA
GetStockObject
MoveToEx
CreatePalette
CreateBitmap
PolyPolyline
CreateCompatibleBitmap
SaveDC
RealizePalette
GetCharWidth32A
RoundRect
IntersectClipRect
ExtCreatePen

advapi32

RegSetValueExW
RegEnumKeyExW

shell32

ShellExecuteExW
Shell_NotifyIconW

ole32

CoInitialize

oleaut32

SysReAllocStringLen

Sections

.text
Size: 696KB - Virtual size: 695KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79aefe9c0aa42ac3e5c03ac993d5f3bf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 696KB - Virtual size: 695KB

.data Size: 6.0MB - Virtual size: 6.0MB

.idata Size: 6KB - Virtual size: 5KB

.reloc Size: 15KB - Virtual size: 15KB

.text
Size: 696KB - Virtual size: 695KB

.data
Size: 6.0MB - Virtual size: 6.0MB

.idata
Size: 6KB - Virtual size: 5KB

.reloc
Size: 15KB - Virtual size: 15KB