2024-06-30_7d81480dc33ed5603a660ab787ba942b_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-30_7d81480dc33ed5603a660ab787ba942b_bkransomware
Size

6.7MB
MD5

7d81480dc33ed5603a660ab787ba942b
SHA1

04e0360d151b0c30778f3f747d43bd80785310a3
SHA256

a63e0ec7bf6eee3581885b2d8e0a4b9fc33922c734591704925f15ffc2f257c4
SHA512

834cfae4be9f95429ce40ef492a6089766c0e8b39748a8ef905d25785693947a4aaa1dd6c18a3d0698b278f7aef5159955b86e091f8cff8b95883679ad303bbf
SSDEEP

196608:jMy63jg8h9hbY/yYUTeLqKATGgjkLj3gZkcjq3:P8gAbBYUTyFAVw3gSc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-30_7d81480dc33ed5603a660ab787ba942b_bkransomware

Files

2024-06-30_7d81480dc33ed5603a660ab787ba942b_bkransomware
.exe windows:6 windows x86 arch:x86

4ed64e36c34988e77825af263306b75f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetProcessHeap
HeapAlloc
HeapSize
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleExW
ExitProcess
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SetThreadPriority
SignalObjectAndWait
WaitForSingleObjectEx
SetEvent
GetVersionExW
CreateTimerQueue
HeapFree
LoadLibraryExW
ExitThread
CreateThread
CreateSemaphoreW
GetProcAddress
GetModuleHandleW
GetTickCount
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
RtlUnwind
RaiseException
GetCommandLineW
HeapReAlloc
GetLastError
DecodePointer
EncodePointer
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime
GetExitCodeThread
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
WaitForSingleObject
DuplicateHandle
CloseHandle
VirtualFree
VirtualProtect
ReleaseSemaphore
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LCMapStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FindFirstFileW
SetStdHandle
WriteConsoleW
DeleteFileW
FileTimeToLocalFileTime
WinExec
GetUserDefaultUILanguage
IsDebuggerPresent
EnumResourceTypesW
GetSystemInfo
QueryDosDeviceW
RemoveDirectoryW
LockResource
VirtualAlloc
GetThreadLocale
SetThreadLocale
GetPrivateProfileIntW
GetFileAttributesW
lstrcpynW
HeapCreate
ReadProcessMemory
Sleep
GetUserDefaultLangID
GetLogicalDrives
GetUserDefaultLCID
CompareFileTime
SystemTimeToTzSpecificLocalTime
LoadResource
SetErrorMode
GetDriveTypeW
SetFilePointer
GetFileSize
EnumResourceNamesW
GetFullPathNameW
SwitchToThread
lstrcpyW
GetVersion
GetThreadPriority
DeviceIoControl
VerifyVersionInfoW
GetTempPathW
FormatMessageW
LoadLibraryW
GetPrivateProfileStringW
CreateDirectoryW
EnumCalendarInfoW
GetSystemDefaultUILanguage
CreateFileW

user32

RegisterClassA
GetMessageTime
ShowOwnedPopups
DestroyWindow
SetCursor
GetMessageA
GetSystemMenu
CharUpperBuffW
MapDialogRect
GetMessageW
SendDlgItemMessageA
CharNextW
RegisterWindowMessageW
SetKeyboardState
PostMessageW
IsZoomed
GetKeyState
GetSubMenu
DeleteMenu
GetParent
LoadIconA
GetClientRect
DrawTextExW
SetFocus
DrawEdge
BeginPaint
SetScrollRange
GetDoubleClickTime
WaitMessage
GetCapture
SetDlgItemInt
OffsetRect
SetPropA
GetKeyboardLayout
SetRect
MessageBoxA
UnionRect
UnregisterClassA
SetScrollPos
ReleaseDC
EnableMenuItem
MonitorFromWindow
ScrollWindow
CharUpperW
EndDialog
DefWindowProcA
SetWindowsHookExA
DestroyCaret
GetSysColor
ShowWindow
CreatePopupMenu
GetSysColorBrush
AppendMenuA
CreateCaret
IsWindow
GetKeyboardType
CreateWindowExW
InsertMenuW
ScrollWindowEx
RegisterClassW
SetCaretPos
GetDlgItemTextW
UpdateWindow
LoadCursorA
GetDlgCtrlID
GetDlgItemTextA
DialogBoxParamA
GetCaretBlinkTime
SetDlgItemTextA
ValidateRect
GetWindow
EndPaint
HideCaret
GetWindowRect
CreateDialogParamA
SetCapture
KillTimer
RemovePropA
MessageBeep
GetMenuItemInfoW
ModifyMenuW
ShowCaret
GetDC
GetQueueStatus
GetKeyboardState
GetMenu
GetWindowTextA
InvalidateRect
LoadMenuW
GetWindowTextW
SetClassLongA
SendDlgItemMessageW
GetDesktopWindow
CheckDlgButton
IsDlgButtonChecked
PostMessageA
CheckRadioButton
ReleaseCapture
InsertMenuA
SetWindowTextA
SetDlgItemTextW
SendMessageW
MapWindowPoints
SetWindowTextW
SetMenuItemInfoW
GetMonitorInfoW
CheckMenuItem

gdi32

ExtCreatePen
EndPage
TranslateCharsetInfo
GetTextExtentPoint32A
LineTo
MaskBlt
DeleteDC
CreateFontIndirectW
CreateFontA
GetDeviceCaps
GetDIBits
SetDIBColorTable
SetPixel
CreateBitmap
GetCharacterPlacementW
CreateCompatibleDC
PolyPolyline
CreateCompatibleBitmap
SaveDC
RealizePalette
SelectPalette
GetTextExtentExPointA
CreateRectRgn
GetTextExtentPointA
GetCharABCWidthsFloatA
GetClipBox
RectVisible
ExtTextOutA
RestoreDC
CreateSolidBrush
TextOutA
GetTextExtentPoint32W
SetTextColor
SetBkColor
CopyEnhMetaFileA
GdiFlush
CreateHalftonePalette
SelectClipRgn
CreateRectRgnIndirect
Rectangle
CreateBrushIndirect
GetObjectType
GetCurrentPositionEx
CreatePen
SetTextAlign
IntersectClipRect
CreateDIBitmap
GetPixel
GetStockObject
SelectObject
RoundRect

comdlg32

FindTextW
GetSaveFileNameW
GetOpenFileNameW

advapi32

QueryServiceStatus
InitializeSecurityDescriptor
EqualSid
CopySid
RegUnLoadKeyW
RegSetValueExW
RegEnumKeyExW
GetUserNameA
ChangeServiceConfigW
RegConnectRegistryW
StartServiceW
RegGetKeySecurity
RegQueryInfoKeyW
OpenServiceW
OpenSCManagerW

shell32

ExtractIconExW
ShellExecuteW
CommandLineToArgvW
SHGetFileInfoW

ole32

CoInitialize

oleaut32

SafeArrayPtrOfIndex
VariantChangeType
SysAllocStringLen
VariantInit
SafeArrayCreate
VariantCopy
SafeArrayGetLBound
VariantClear
SafeArrayGetUBound
SysReAllocStringLen

Sections

.text
Size: 748KB - Virtual size: 747KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VNQA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ed64e36c34988e77825af263306b75f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 748KB - Virtual size: 747KB

.data Size: 6.0MB - Virtual size: 6.0MB

.idata Size: 9KB - Virtual size: 8KB

.VNQA Size: 4KB - Virtual size: 3KB

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 748KB - Virtual size: 747KB

.data
Size: 6.0MB - Virtual size: 6.0MB

.idata
Size: 9KB - Virtual size: 8KB

.VNQA
Size: 4KB - Virtual size: 3KB

.reloc
Size: 14KB - Virtual size: 14KB