2024-07-11_e33207424627a3331acf23218c581250_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-11_e33207424627a3331acf23218c581250_bkransomware
Size

490KB
MD5

e33207424627a3331acf23218c581250
SHA1

cb048744d0537270b3a93bd1f23fd717cca7442a
SHA256

50f00719646aaa45837a72f7e701142b2b67f2d8cddfbcc021059e3b2bf72aa3
SHA512

ff37d924b84bc22ef979ee5f61d9ec2af6be459cb741d1ca91a0ab9247282793bbe8c007498f52e722b025f23faa7e8e6bdd1f7640628e9865ce0316deb1af03
SSDEEP

12288:J6AIR/PTkrM//VZEzHfNV7eev+3/38D5K7K:ER/dfWPee2P38NQK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-11_e33207424627a3331acf23218c581250_bkransomware

Files

2024-07-11_e33207424627a3331acf23218c581250_bkransomware
.exe windows:5 windows x86 arch:x86

0432e4536476a4ffaf84674f902e13d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetNearestColor
GetNearestPaletteIndex
GetPixelFormat
GetTextCharset
GetMapMode
GetFontLanguageInfo
GetObjectType
GetDeviceCaps
GetMetaRgn
GetCurrentObject
GetPolyFillMode

user32

DrawTextA
CallWindowProcA
SetFocus
GetWindowContextHelpId
BeginPaint
GetDlgItemInt
GetKeyboardType
GetDialogBaseUnits
GetMenuCheckMarkDimensions
IsWindowEnabled
RemovePropA
GetMenuItemCount
GetMenu
GetQueueStatus
GetScrollPos
GetForegroundWindow
GetDlgItem
GetMenuState
EnableWindow
GetWindowDC
GetMenuContextHelpId
LoadIconA
SendMessageA
GetMenuItemID

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetProcAddress
GetModuleHandleA
GlobalSize
GetProcessHeap
QueryPerformanceCounter
IsDebuggerPresent
GetVersion
LocalFlags
GetStdHandle
GetCurrentThreadId
GetTickCount
GlobalHandle
SetFilePointer
GlobalFlags
CloseHandle
FindResourceA
FlushFileBuffers
MoveFileA
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
IsProcessorFeaturePresent
WriteFile
GetModuleFileNameW
SetLastError
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetFileType
GetModuleFileNameA
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
SetEnvironmentVariableA

Sections

.text
Size: 419KB - Virtual size: 419KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0432e4536476a4ffaf84674f902e13d7

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 419KB - Virtual size: 419KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 45KB - Virtual size: 232KB

.text
Size: 419KB - Virtual size: 419KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 45KB - Virtual size: 232KB