2024-06-19_ecdc4efd6c73562bfaa2835424268765_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-19_ecdc4efd6c73562bfaa2835424268765_bkransomware
Size

248KB
MD5

ecdc4efd6c73562bfaa2835424268765
SHA1

1babe40b7e8634c21237546ed4bb321d0f3b4ee2
SHA256

71bda35f0b449e8456b0f4a9727e1a73a5109ad9d566d28a4ea356bbe5f3b004
SHA512

8d4039166ab78ae83c6799f729ccbfbc9f57ee16c731423fa54f44bf42c53c3c439974186a59816924091561361bd791e7ca80381db1971356e9ca61e9df8aa1
SSDEEP

3072:EROjJ2QcmYnFIBLTqWZJyOKYlRsnrUOlyl68+LGGWu:Pj4mYELTqTmYyGWu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-19_ecdc4efd6c73562bfaa2835424268765_bkransomware

Files

2024-06-19_ecdc4efd6c73562bfaa2835424268765_bkransomware
.exe windows:5 windows x86 arch:x86

20cdb48c048eea45771e21b0573d6acf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libadm

admuser
ref_opc
nom_tex
empre
foptions_gem
fstartlogno
fgraba_lac
fstartlog_pquery
fver_sys
fquery_pasa
fquery_pasa_ope
frequery_interactivo
fexiste_fadmbqu
fdame_interactivo
fnav2h_leer_nav
fnav2h_dame_datos_nav
fquery_pasa_ini
fnav2h_navegando
ftraduce_mens_p
fnav2h_dame_codigos
fquery_pasa_din
fcons_externa
fquery_doconsulta
fnav2p_es_origen_que
fnav2p_cerrard
fbusseq
fini_lista_query
fquery_despliegue
fgemidioma
fquery_do
ffinishlog
ffinishlog_pquery
op_key
usu_gem
tty
ferror
fmsp_errs
fdisp_nomcol
fperdi
fnav2h_query_salir
fnav2h_cambia
ffunque_text
fdichlp
fnav2h_titulo_ventana
ftitulo
fmsp_pant

libgui

dspTo
displayEvent
displayEnd
frmOpen
winOpen
frmDisplay
Wscreen
rowNext
displayNew
set_count
arr_curr
fgl_messagebox
fgl_rowchecked
fgl_setcolumn
fgl_setcomments
fgl_setcaption
keyNext

libsql

ord16
ord9
ord1
ord20
ord18
ord7
ord6
ord3

librun

clipOper
numberPop
matchOper
retString
nullOper
sysMemcpy
cmpOper
addOper
boolTest
catOper
shortPush
shortPop
fcnCall2
longPush
charPush
charPop
fcnEnter3
excepGet
progThrow
stackPop
negOper
subOper
numberPush
stackPush
status
sqlca
length
arg_val
longPop
substrPush
substrPop
progEnd
stackGet
progWin
stackNew
notOper
cmpWhen

kernel32

GetCurrentProcess
Sleep
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
GetLastError
GetCurrentThread
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapFree
IsValidCodePage
CreateFileW
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
GetStringTypeW
HeapReAlloc
HeapAlloc
OutputDebugStringW
RtlUnwind
LoadLibraryExW
FreeLibrary
SetConsoleCtrlHandler
GetCPInfo
GetOEMCP
GetACP
TerminateProcess

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 1004KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20cdb48c048eea45771e21b0573d6acf

Headers

DLL Characteristics

File Characteristics

Imports

libadm

libgui

libsql

librun

kernel32

Sections

.text Size: 171KB - Virtual size: 171KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 17KB - Virtual size: 1004KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 171KB - Virtual size: 171KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 17KB - Virtual size: 1004KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 10KB - Virtual size: 10KB