2024-06-24_b861ca8d64d4a1f98e4689ce191910e8_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-24_b861ca8d64d4a1f98e4689ce191910e8_bkransomware
Size

492KB
MD5

b861ca8d64d4a1f98e4689ce191910e8
SHA1

97092f0504fd928294660e29a62e814228ad1eeb
SHA256

821240969777ef16b3ed6b5c1993d7cbf55ca010d55fb9ed32f79d74490f833a
SHA512

1aadc181e7d10725eb7666dabf89d3f39ecb2a177702713e3d80b3a2cf2143fc7554fb76837b7029ef965ab9377e3291585e67e2ffed40720d8c827298c8b511
SSDEEP

6144:7MvfqdTdafHTPqHAnorhuXzzpSeev5u2ZgnczurMfCVz+XEEJiCaZTq:QfqdUfHTuAoFQ18Q2XzurWCVyXFJkZG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-24_b861ca8d64d4a1f98e4689ce191910e8_bkransomware

Files

2024-06-24_b861ca8d64d4a1f98e4689ce191910e8_bkransomware
.exe windows:5 windows x86 arch:x86

236f76547831fc6a6f3eb8adbe4447be

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetTextAlign
SetSystemPaletteUse
GetSystemPaletteUse
UpdateColors
SetTextCharacterExtra
GetMetaRgn
GetGraphicsMode
GetDeviceCaps
GetRandomRgn
GetFontUnicodeRanges
GetDCPenColor
GetMapMode
GetTextColor

user32

GetDC
GetDlgItem
SendMessageA
GetDlgItemInt
BeginPaint
CallWindowProcA
CheckDlgButton
SetDlgItemTextA
GetMenuItemCount
GetMenuItemID
GetForegroundWindow
GetWindowDC
SetFocus
GetMenuState
GetScrollPos
GetMenu
IsWindowEnabled
DrawTextA
IsWindowUnicode
GetWindowLongA
GetQueueStatus
GetInputState
EndPaint
RemovePropA
GetKeyboardType
EndDialog

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
OutputDebugStringW
GetProcAddress
GetModuleHandleA
MoveFileA
GetCurrentThreadId
GlobalHandle
GlobalSize
GetDriveTypeA
LockResource
GetProcessHeap
GetCurrentProcessId
GlobalAlloc
GetLastError
GetStdHandle
GlobalFlags
GetCurrentProcess
DeleteFileA
LocalFlags
SizeofResource
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
GetCommandLineA
IsProcessorFeaturePresent
WriteFile
GetModuleFileNameW
SetLastError
GetCurrentThread
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
CloseHandle
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA

Sections

.text
Size: 431KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

236f76547831fc6a6f3eb8adbe4447be

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 431KB - Virtual size: 430KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 35KB - Virtual size: 118KB

.text
Size: 431KB - Virtual size: 430KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 35KB - Virtual size: 118KB