2024-06-28_3bacb76203c4f4bab733fa402a65c8f0_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-28_3bacb76203c4f4bab733fa402a65c8f0_bkransomware
Size

225KB
MD5

3bacb76203c4f4bab733fa402a65c8f0
SHA1

45232920be723da9c6c14a6523751162b012f0a5
SHA256

9e89c57603e61cac50ebf353f9844bb1487ae8a677315976ff84ca4ccd9ed378
SHA512

8147a280523f1a58a63f4b73020029d6182d00497f58157620141e864bdced7090b0ab474492c0ece9bd3c66e5785530f778da894aabde6de4a86da1b1f0f281
SSDEEP

6144:bgLc8W6bpb+oYMSO6SaWAkAuH9yKWE4lj53BOeb9XBTtuxDpTVH0jpPN/RL93Eji:bgLc8W6bpb+oYMSO6SaWAkAuH9yKWE4x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-28_3bacb76203c4f4bab733fa402a65c8f0_bkransomware

Files

2024-06-28_3bacb76203c4f4bab733fa402a65c8f0_bkransomware
.exe windows:6 windows x86 arch:x86

49e50ff110a7acdd956538eaa2ed1ef8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

N:\builds\Abhi_N\PilpxSrc\PilpxSrc_VS2013\Release\PipxDiag_32.pdb

Imports

kernel32

GetEnvironmentVariableA
FindFirstFileA
FindClose
GetSystemInfo
FindNextFileA
QueryPerformanceFrequency
GetVersionExA
CreateFileA
DeviceIoControl
CloseHandle
GetLastError
CreateMutexA
QueryPerformanceCounter
FileTimeToSystemTime
lstrlenA
GetFileAttributesExW
CreateProcessA
GetExitCodeProcess
SetEndOfFile
CreateFileW
HeapReAlloc
LCMapStringW
CompareStringW
GetFileAttributesA
GetFileAttributesExA
FreeLibrary
GetCurrentProcess
GetProcAddress
GetModuleFileNameA
LocalFree
LoadLibraryA
GetStringTypeW
ReadConsoleW
ReadFile
OutputDebugStringW
LoadLibraryExW
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
SetFilePointerEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTimeZoneInformation
HeapSize
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
ReleaseMutex
WaitForSingleObject
GetCurrentProcessId
RaiseException
LoadLibraryExA
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
HeapAlloc
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
FlushFileBuffers
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetProcessHeap
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetModuleFileNameW
GetCurrentThreadId

user32

SetWindowPos
GetSysColor
GetDesktopWindow
DefWindowProcA
ShowWindow
UpdateWindow
wsprintfA
EndPaint
DestroyWindow
GetWindowRect
RegisterClassExA
DrawTextA
GetClientRect
BeginPaint
MessageBoxA
CreateWindowExA

gdi32

SelectObject
GetStockObject
SetBkColor

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetFolderPathA

ole32

CoInitializeEx
CoInitializeSecurity
CoUninitialize
CoSetProxyBlanket
CoCreateInstance

oleaut32

SysAllocString
SysFreeString
VariantClear

winmm

timeGetTime

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49e50ff110a7acdd956538eaa2ed1ef8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

winmm

version

Sections

.text Size: 145KB - Virtual size: 145KB

.rdata Size: 50KB - Virtual size: 50KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 145KB - Virtual size: 145KB

.rdata
Size: 50KB - Virtual size: 50KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 12KB - Virtual size: 12KB