2024-06-27_4f7748b27e6fccc0995f4b6b9ca33686_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-27_4f7748b27e6fccc0995f4b6b9ca33686_bkransomware
Size

2.5MB
MD5

4f7748b27e6fccc0995f4b6b9ca33686
SHA1

b6a31b27f545385062215d18c6cfc8b4f097e19a
SHA256

93543630e1545ba2c82fea985da174365d92e6974699e3e6a0b55c02998abb65
SHA512

ea0cafdbd75db1d66b3344e00483ab8d94f4f04200e5bc753efa243c413c00343dc00fcbbcf43761281150ec889e07c03a0ab035aba8dbef1c0ba2d37274edbc
SSDEEP

49152:Ip6Uwk7Y4MjAI0PbfmzYhZw44MXZXiW2aSRSkuU8AT7UNzaWiv7qJIJsgkq:Ip6bk7LMjlGyzYhZw44MIW2aSRSkuU8Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-27_4f7748b27e6fccc0995f4b6b9ca33686_bkransomware

Files

2024-06-27_4f7748b27e6fccc0995f4b6b9ca33686_bkransomware
.exe windows:5 windows x86 arch:x86

a1b0efe4285ccc903f9feab6fc740ad7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GetCPInfo
GetStringTypeW
LCMapStringW
GetConsoleCP
GetConsoleMode
GetACP
SetFilePointerEx
OutputDebugStringW
WriteConsoleW
SetEnvironmentVariableA
VirtualFree
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
IsValidCodePage
GetTimeZoneInformation
PeekNamedPipe
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
GetStdHandle
VirtualQuery
VirtualAlloc
GetModuleHandleExW
ExitProcess
HeapQueryInformation
GetFileType
SetStdHandle
ExitThread
CreateThread
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
GetSystemTimeAsFileTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
VirtualProtect
SearchPathW
GetProfileIntW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
GlobalFindAtomW
GlobalDeleteAtom
GlobalFlags
GetUserDefaultUILanguage
EncodePointer
GlobalAddAtomW
ResumeThread
LoadLibraryA
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameW
FlushFileBuffers
GetFileAttributesExW
GlobalGetAtomNameW
GetCurrentProcessId
LocalReAlloc
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetModuleHandleA
OutputDebugStringA
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcmpA
FormatMessageW
GlobalSize
FindResourceExW
lstrcpyW
InitializeCriticalSection
SetThreadPriority
CompareStringW
WideCharToMultiByte
GetVersionExA
GetVolumeInformationW
FindFirstFileW
GetFileAttributesW
CreateDirectoryW
GetCurrentDirectoryW
GetWindowsDirectoryW
GetTempPathW
GetSystemDirectoryW
GetDriveTypeW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetCommandLineW
LoadLibraryW
lstrlenW
lstrcpynW
GetFileTime
FindClose
GetFileSize
GetFileInformationByHandle
GetCurrentThread
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetTickCount
Sleep
WaitForSingleObject
LocalFree
LocalAlloc
SetCurrentDirectoryW
LoadLibraryExW
lstrcmpiW
FreeLibrary
DecodePointer
MultiByteToWideChar
GetVersionExW
CopyFileW
DeleteFileW
FindResourceW
CreateProcessW
GetModuleHandleW
GetModuleFileNameW
lstrcmpW
GetSystemInfo
MulDiv
SizeofResource
LoadResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
GetCurrentThreadId
RaiseException
GetCurrentProcess
FlushInstructionCache
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
GetProcAddress
LockResource
FreeResource
InterlockedDecrement
InterlockedIncrement
CreateFileW
CloseHandle
SetFilePointer
ReadFile
WriteFile
ReadConsoleW
GetFileSizeEx
LoadLibraryExA

user32

GetNextDlgGroupItem
GetNextDlgTabItem
CreateDialogIndirectParamW
DeleteMenu
SetCursor
ShowOwnedPopups
SendDlgItemMessageA
CopyImage
InflateRect
DestroyMenu
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
PostQuitMessage
WinHelpW
GetScrollInfo
SetScrollInfo
GetTopWindow
GetClassLongW
AdjustWindowRectEx
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetClassInfoW
RegisterClassW
GetMessageTime
GetMessagePos
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
IsDialogMessageW
CheckDlgButton
GetScrollPos
SetScrollPos
RealChildWindowFromPoint
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
GetMessageW
CharUpperW
GetSysColorBrush
GetLastActivePopup
MessageBoxW
IsWindowEnabled
UnhookWindowsHookEx
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuState
GetMenuItemInfoW
ModifyMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
WindowFromPoint
FrameRect
wsprintfW
LoadIconW
PtInRect
RemovePropW
GetPropW
SetPropW
DrawTextW
SystemParametersInfoW
DestroyIcon
GetWindowThreadProcessId
FindWindowW
EqualRect
OffsetRect
IntersectRect
CopyRect
SetForegroundWindow
GetForegroundWindow
GetSystemMetrics
BringWindowToTop
IsIconic
GetWindowPlacement
PeekMessageW
DispatchMessageW
TranslateMessage
GetMonitorInfoW
MonitorFromWindow
MapDialogRect
MapWindowPoints
SetWindowContextHelpId
GetWindowRect
EnableWindow
KillTimer
SetTimer
SetDlgItemTextW
EndDialog
ShowWindow
LoadCursorW
GetWindow
GetClassNameW
GetParent
GetDesktopWindow
SetWindowLongW
GetWindowLongW
FillRect
CharUpperBuffW
RegisterClipboardFormatW
SetMenuDefaultItem
RegisterWindowMessageW
SendMessageW
PostMessageW
DefWindowProcW
CallWindowProcW
GetSysColor
ScreenToClient
ClientToScreen
GetClientRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
DestroyAcceleratorTable
CreateAcceleratorTableW
ReleaseCapture
SetCapture
GetFocus
SetFocus
CharNextW
GetDlgItem
DialogBoxIndirectParamW
SetWindowPos
DrawFocusRect
SetRectEmpty
IsRectEmpty
LoadImageW
DrawIconEx
GetIconInfo
MessageBeep
GetAsyncKeyState
DrawIcon
GetWindowRgn
DestroyCursor
CreateMenu
MoveWindow
DestroyWindow
IsChild
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
GetMenuStringW
EnableScrollBar
UnregisterClassW
RegisterClassExW
GetClassInfoExW
CopyIcon
GetDoubleClickTime
SetClassLongW
LockWindowUpdate
CreateWindowExW
IsWindow
SetParent
SetRect
SetCursorPos
CopyAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
WaitMessage
PostThreadMessageW
GetSystemMenu
IsZoomed
GetComboBoxInfo
TrackMouseEvent
GetKeyNameTextW
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
MonitorFromPoint
UpdateLayeredWindow
IsMenu
UnionRect
SetWindowRgn
DrawFrameControl
DrawEdge
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
LoadMenuW
MapVirtualKeyW
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
InvertRect
GetDlgCtrlID
HideCaret
DrawMenuBar

gdi32

CreateRectRgn
Escape
ExcludeClipRect
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
CombineRgn
CreateRectRgnIndirect
PatBlt
CreatePatternBrush
DPtoLP
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
GetRgnBox
OffsetRgn
CreateRoundRectRgn
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceW
CreateHatchBrush
CreateBitmap
CreateDCW
CopyMetaFileW
SetTextColor
ExtTextOutW
MoveToEx
GetTextMetricsW
SetBkMode
SetBkColor
RoundRect
LineTo
GetTextExtentPoint32W
GetClipBox
CreatePen
GetObjectW
SelectObject
GetStockObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateSolidBrush
CreateCompatibleDC
SetRectRgn
BitBlt
CreateCompatibleBitmap

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW

shell32

DragQueryFileW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHBrowseForFolderW
SHGetFileInfoW
SHAppBarMessage
DragFinish
ShellExecuteExW
SHGetDesktopFolder
SHGetSpecialFolderLocation

comctl32

InitCommonControlsEx
ord17

shlwapi

PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
StrFormatKBSizeW

uxtheme

GetThemePartSize
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsAppThemed

ole32

CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CLSIDFromString
CoCreateInstance
OleInitialize
OleUninitialize
OleLockRunning
CreateStreamOnHGlobal
CoGetClassObject
CoTaskMemRealloc
OleDuplicateData
ReleaseStgMedium
CoDisconnectObject
CoUninitialize
CoInitialize
CoInitializeEx
DoDragDrop
OleCreateMenuDescriptor
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
CLSIDFromProgID
OleDestroyMenuDescriptor

oleaut32

OleCreateFontIndirect
VarUI4FromStr
SystemTimeToVariantTime
VariantTimeToSystemTime
LoadRegTypeLi
VariantCopy
VariantChangeType
VarBstrFromDate
LoadTypeLi
VariantClear
SysStringLen
VariantInit
SysFreeString
SysAllocString
SysAllocStringLen

wintrust

WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
WinVerifyTrust
WTHelperProvDataFromStateData

crypt32

CertGetNameStringW

wininet

HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetSetOptionW
InternetQueryOptionW
InternetQueryDataAvailable
InternetReadFile
InternetOpenUrlW
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetCanonicalizeUrlW
InternetCrackUrlW

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 336KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 684KB - Virtual size: 688KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a1b0efe4285ccc903f9feab6fc740ad7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

wintrust

crypt32

wininet

oleacc

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 336KB - Virtual size: 336KB

.data Size: 26KB - Virtual size: 59KB

.rsrc Size: 118KB - Virtual size: 118KB

.reloc Size: 684KB - Virtual size: 688KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 336KB - Virtual size: 336KB

.data
Size: 26KB - Virtual size: 59KB

.rsrc
Size: 118KB - Virtual size: 118KB

.reloc
Size: 684KB - Virtual size: 688KB