2024-06-30_c0b058ce18a9d5c78496c3f272d24c49_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-30_c0b058ce18a9d5c78496c3f272d24c49_bkransomware
Size

525KB
MD5

c0b058ce18a9d5c78496c3f272d24c49
SHA1

682c35f78110432714b522ceab9d2f273a7ad5c3
SHA256

438f638049939d5c2af842a29ec832a23a0e410bb697c885eafcfd76a3e9b31c
SHA512

ff0434c9c5a1bc2952cdf0dfd6ad606aa64b868b75de384797a5fbea9cdd74c1d4e8c6f51db610f4005234e307eec239925efb5b9bbf297888f21954b4d8fd54
SSDEEP

6144:8PlpxAEhRpWG3Y93gcDw92eurX/lOihu0Qqub52ufV2gFpTd4+6:8P9JhR93YKP217UihRQqudV2g3y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-30_c0b058ce18a9d5c78496c3f272d24c49_bkransomware

Files

2024-06-30_c0b058ce18a9d5c78496c3f272d24c49_bkransomware
.exe windows:5 windows x86 arch:x86

793caf30efce8d4392ad461db4c993ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetCurrentObject
GetGraphicsMode
SetTextCharacterExtra
GetTextCharsetInfo
GetClipRgn
SetTextColor
GetMapMode
SetSystemPaletteUse
GetDCBrushColor
GetTextCharset
GetNearestColor
SetPixel
SetTextAlign
GetPolyFillMode
SetTextJustification
GetSystemPaletteUse
GetStretchBltMode
GetDCPenColor

user32

GetDialogBaseUnits
ShowWindow
IsWindowUnicode
EndDialog
GetMenuItemCount
MoveWindow
BeginPaint
GetMenuCheckMarkDimensions
WindowFromDC
CheckDlgButton
GetMenuItemID
GetInputState
GetWindowDC
SendMessageA
GetQueueStatus
GetWindowContextHelpId
GetMenuState
EnableWindow
SetWindowTextA
GetDlgItem
GetPropA
GetDC

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
FlushFileBuffers
WriteConsoleW
SetStdHandle
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetModuleHandleA
GetProcAddress
GetTickCount
GetCurrentThreadId
GetCurrentProcess
LocalFlags
IsDebuggerPresent
GlobalFlags
FindResourceA
GetCurrentProcessId
QueryPerformanceCounter
GetStdHandle
GlobalHandle
DeleteFileA
SetFilePointer
CloseHandle
GetProcessHeap
LockResource
IsProcessorFeaturePresent
GetFileTime
GetDriveTypeA
GetLastError
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThread
GetConsoleCP
GetConsoleMode
GetFileType
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
SetFilePointerEx
FileTimeToLocalFileTime
GetFileInformationByHandle
SetEnvironmentVariableA

Sections

.text
Size: 444KB - Virtual size: 443KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

793caf30efce8d4392ad461db4c993ae

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 444KB - Virtual size: 443KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 55KB - Virtual size: 166KB

.text
Size: 444KB - Virtual size: 443KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 55KB - Virtual size: 166KB