2024-07-23_c1a36e58069897dea47b818e577a93c0_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-23_c1a36e58069897dea47b818e577a93c0_bkransomware
Size

6.8MB
MD5

c1a36e58069897dea47b818e577a93c0
SHA1

305856f9dae6f3eb16c0203d3c7dac8844261220
SHA256

df535e75411776fa8c923abb78e5c77237b0a2899a2890a399cc19412803d7e8
SHA512

654b746aac9716272159c1acb1f8c5845b71b0f91524946c56bb1e2451159f206b3bc8175f4e839026a38b56fa22b0b271ea73a78174ec0582fa2c5da5ecfae5
SSDEEP

196608:vWz0ksnYz3Y8XentnXLCB74/JROops+H3ew+E:I4I1AtnQ74SUx3uE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-23_c1a36e58069897dea47b818e577a93c0_bkransomware

Files

2024-07-23_c1a36e58069897dea47b818e577a93c0_bkransomware
.exe windows:6 windows x86 arch:x86

ec38ee8a2f3273783aba0cb7f2c188b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
FreeEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetOEMCP
GetACP
IsValidCodePage
GetProcessHeap
HeapSize
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
LCMapStringW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SwitchToThread
WaitForSingleObjectEx
SetEvent
SetFilePointerEx
HeapAlloc
LoadLibraryExW
CreateThread
CreateSemaphoreW
GetProcAddress
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetCPInfo
RtlUnwind
RaiseException
GetCommandLineW
HeapFree
HeapReAlloc
GetStringTypeW
MultiByteToWideChar
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentThread
WaitForSingleObject
DuplicateHandle
CloseHandle
WideCharToMultiByte
OutputDebugStringW
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleHandleA
VirtualFree
VirtualProtect
ReleaseSemaphore
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
SetStdHandle
WriteConsoleW
ReadConsoleW
CreateFileW
IsDebuggerPresent
GetThreadPriority
GetFullPathNameW
GetLastError
VerifyVersionInfoW
SetThreadPriority
FileTimeToSystemTime
GetFileAttributesW
lstrcpynW
GetVersionExW
ReadProcessMemory
Sleep
LoadLibraryW
GetCommandLineA
GetTickCount
SignalObjectAndWait
GetUserDefaultLCID
GetEnvironmentStringsW
GetCurrentProcess
VerSetConditionMask
EnumCalendarInfoW
FindResourceW
GetDriveTypeW
FindFirstFileW
GetFileSize
GetTempFileNameW
EncodePointer
GetSystemDefaultLangID
lstrcpyW
WinExec
GetUserDefaultUILanguage
RemoveDirectoryW
GetExitCodeThread
GetDiskFreeSpaceW
VirtualAlloc
SetThreadLocale
ExitThread
GetExitCodeProcess
CreateDirectoryW
SystemTimeToFileTime
SetErrorMode
CreateTimerQueue

user32

TrackPopupMenu
SetCapture
MsgWaitForMultipleObjects
GetSubMenu
LoadIconA
RemovePropA
CharUpperBuffW
PostQuitMessage
GetMessageW
GetWindow
GetMessageTime
SetTimer
SetWindowRgn
EndPaint
ShowOwnedPopups
ToAsciiEx
GetKeyState
GetMenuStringW
CharLowerBuffW
SetParent
DrawTextExW
SetFocus
GetWindowTextLengthA
ModifyMenuW
GetQueueStatus
GetKeyboardState
GetMenu
OffsetRect
MessageBoxA
UnionRect
GetWindowLongW
UnregisterClassA
GetWindowLongA
GetWindowTextW
MonitorFromWindow
SetClassLongA
ScrollWindow
SetWindowLongW
SendDlgItemMessageW
EnumChildWindows
ShowWindow
SetMenu
CreatePopupMenu
AppendMenuA
GetMenuItemCount
CreateCaret
IsWindow
FlashWindow
CreateWindowExW
GetDlgItemTextW
SendMessageW
UpdateWindow
LoadCursorA
GetDlgItemTextA
SetMenuItemInfoW
GetMonitorInfoW
GetDlgItemInt
GetSystemMenu
RegisterWindowMessageW
SetKeyboardState
DeleteMenu
CreateMenu
ShowCaret
BeginPaint
GetDC
SetDlgItemInt
GetWindowPlacement
GetWindowTextA
SetPropA
LoadMenuW
PeekMessageA
CharUpperW
SetWindowsHookExA
RedrawWindow
DestroyCaret
GetDesktopWindow
IsDlgButtonChecked
RemoveMenu
GetSystemMetrics
SetDlgItemTextW
GetDlgCtrlID
GetCaretBlinkTime
SetWindowTextW
SetDlgItemTextA
ValidateRect
TranslateMDISysAccel

gdi32

SelectPalette
SetPaletteEntries
GetTextExtentExPointA
CreateRectRgn
GetCharWidth32A
RectVisible
IntersectClipRect
CreateDIBitmap
RestoreDC
SaveDC
MoveToEx
PatBlt
DeleteDC
CopyEnhMetaFileA
ExcludeClipRect
CreatePalette
GetPaletteEntries
CreatePenIndirect
PolyPolyline
CreateCompatibleBitmap
GetObjectType
GetTextExtentPointA
RoundRect
GetPixel
GetStockObject
CreateCompatibleDC
SetMapMode
DeleteObject
SetDIBColorTable
SetBkColor
CreateFontA
LineTo
BitBlt
UpdateColors
CreateRectRgnIndirect

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegSetKeySecurity
AllocateAndInitializeSid
RegConnectRegistryW
RegGetKeySecurity
RegUnLoadKeyW
StartServiceW
CloseServiceHandle

shell32

Shell_NotifyIconW
ShellExecuteW
CommandLineToArgvW
ExtractIconExW

oleaut32

VariantChangeType
SysAllocStringLen
SafeArrayCreate
VariantInit

Sections

.text
Size: 717KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec38ee8a2f3273783aba0cb7f2c188b8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

Sections

.text Size: 717KB - Virtual size: 716KB

.data Size: 6.0MB - Virtual size: 6.0MB

.idata Size: 7KB - Virtual size: 7KB

.reloc Size: 21KB - Virtual size: 20KB

.text
Size: 717KB - Virtual size: 716KB

.data
Size: 6.0MB - Virtual size: 6.0MB

.idata
Size: 7KB - Virtual size: 7KB

.reloc
Size: 21KB - Virtual size: 20KB