2024-06-15_550db76cee016abace550ab9e661cb26_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-15_550db76cee016abace550ab9e661cb26_bkransomware
Size

6.7MB
MD5

550db76cee016abace550ab9e661cb26
SHA1

89168c195b175ce6f3bb46dd434fe0c6a2f13157
SHA256

80e393b4fb80c65551952b353eb8e6a4ab0b25487c2cb55313e89c867c6b0d41
SHA512

cf9a767cfe9a222a90c8d385167e4e1924c5e383b6475b6404b88132b382e44fdf1fbfe7fd18d91cb7391a4d7633bf5010624956cdb880a476fe1c0b74376646
SSDEEP

196608:nG2JB2q7ZArQ1nmc/a5nBywNAyT24DWGlKxfXXaqIj:bTd7ZArwa5UnL4DkwqIj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-15_550db76cee016abace550ab9e661cb26_bkransomware

Files

2024-06-15_550db76cee016abace550ab9e661cb26_bkransomware
.exe windows:6 windows x86 arch:x86

699c5b087e721f0127d24255618b1428

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileW
MapViewOfFile
GetCurrentThread
ExpandEnvironmentStringsA
ClearCommBreak
SetCommState
TlsSetValue
IsValidLocale
GetModuleFileNameW
CreateFileW
RaiseException
GetPrivateProfileIntW
IsDBCSLeadByteEx
ResetEvent
CreateFileMappingA
QueryDosDeviceW
GetStringTypeW
VirtualProtect
DeleteCriticalSection
OpenFileMappingA
Sleep
SetStdHandle
LoadLibraryW
EnumResourceNamesW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualFree
VirtualAlloc
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
GetEnvironmentVariableW
EnumSystemLocalesW
DeleteFileW
GetModuleFileNameA
CreatePipe
LoadLibraryA
EnterCriticalSection
FindFirstFileA
GetStartupInfoW
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetProcessTimes
SetDllDirectoryW
SetEnvironmentVariableW
LoadResource
SetEndOfFile
VirtualQuery
TlsGetValue
CreateFileA
SetFilePointerEx
GetTempFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
WriteConsoleW
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThreadId
GetExitCodeThread
LeaveCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
GetCommandLineW
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsFree
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
CreateThread
ExitThread
LoadLibraryExW
HeapFree
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
HeapAlloc
GetProcessHeap
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStdHandle
GetFileType

user32

GetMessageW
ShowWindow
CreateWindowExW
SendMessageW
DestroyAcceleratorTable
CharNextW
GetMenuStringW
CreateIconIndirect
GetWindowTextW
DrawStateW
UpdateWindow
GetKeyboardType
InsertMenuW
SetDlgItemTextW
GetMonitorInfoW
GetWindow
EndPaint
LoadStringA
GetWindowInfo
DrawTextExW
GetMenuItemInfoW
GetDC
CreateDialogIndirectParamA
MonitorFromWindow
SendDlgItemMessageW
GetDesktopWindow
DrawMenuBar
ToUnicode
EnumChildWindows

gdi32

ExtCreateRegion
SetROP2
CreatePolygonRgn
GetMetaFileBitsEx
StretchBlt
GetRegionData
SetPolyFillMode
CreateBitmapIndirect
GetObjectW
CreateEnhMetaFileW
CombineRgn

comdlg32

FindTextW

advapi32

RegLoadKeyW
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueA
RegCloseKey

shell32

ShellExecuteExW
ShellExecuteW
CommandLineToArgvW

oleaut32

SysAllocStringLen
SafeArrayCreate

Sections

.text
Size: 721KB - Virtual size: 721KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

699c5b087e721f0127d24255618b1428

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

Sections

.text Size: 721KB - Virtual size: 721KB

.data Size: 6.0MB - Virtual size: 6.0MB

.idata Size: 5KB - Virtual size: 4KB

.reloc Size: 15KB - Virtual size: 14KB

.text
Size: 721KB - Virtual size: 721KB

.data
Size: 6.0MB - Virtual size: 6.0MB

.idata
Size: 5KB - Virtual size: 4KB

.reloc
Size: 15KB - Virtual size: 14KB