2024-08-08_345a519c2c05d7113f72dedc2fe5991a_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-08_345a519c2c05d7113f72dedc2fe5991a_bkransomware
Size

6.8MB
MD5

345a519c2c05d7113f72dedc2fe5991a
SHA1

6c08b2cf83b7e9e2b59c403e7b49827dcd2f1834
SHA256

100f92870bb3408043a4bdd708e2502bc82b4e4504173b5eec8601a76db796a3
SHA512

24b3b36bde3718245e3bba4765569cc817268b3be97e0938ad8c02014364b91da1ee4e4d424526dc13721ed7ca6ac819159d6c28742a31e6527f79e963e98feb
SSDEEP

196608:AbEhUw7mbFCFLy6Y5GJu2PpNXytpJM4jsYLCBxuk:QwyBELK8uEt6HTLCB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-08_345a519c2c05d7113f72dedc2fe5991a_bkransomware

Files

2024-08-08_345a519c2c05d7113f72dedc2fe5991a_bkransomware
.exe windows:6 windows x86 arch:x86

a73edfdfbcf581bf35aac496eba73339

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
OutputDebugStringW
SetFilePointerEx
ReadFile
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetOEMCP
GetACP
IsDebuggerPresent
GetProcessHeap
HeapSize
ExitProcess
GetUserDefaultLCID
GetLocaleInfoW
LCMapStringW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
InterlockedPopEntrySList
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
SetEvent
CreateTimerQueue
HeapAlloc
ExitThread
CreateThread
CreateSemaphoreW
GetProcAddress
GetModuleHandleW
GetTickCount
GetStartupInfoW
TlsFree
TlsGetValue
TlsAlloc
CreateEventW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
RtlUnwind
HeapReAlloc
GetLastError
DeleteCriticalSection
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
SetStdHandle
WriteConsoleW
ReadConsoleW
LoadLibraryW
GetCommandLineW
EnumSystemLocalesW
GetSystemTime
GetThreadTimes
GetCurrentProcessId
CreateFileMappingA
GetLocalTime
ResetEvent
GlobalFree
CreateNamedPipeA
IsDBCSLeadByteEx
RaiseException
FlushFileBuffers
CreateFileW
MulDiv
GetFileAttributesA
CreateEventA
Sleep
GetConsoleCP
TlsSetValue
SetCommTimeouts
GetWindowsDirectoryA
GetCurrentThread
WaitForSingleObjectEx
GetModuleHandleExW
HeapFree
QueryPerformanceCounter
GetCurrentProcess
GetCommState
FreeLibrary
GetModuleFileNameA
LocalFree
CloseHandle
GetStringTypeW
FindNextFileA
CreatePipe
IsValidCodePage
SetLastError
MultiByteToWideChar
CompareStringW
TerminateProcess
IsProcessorFeaturePresent
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
IsValidLocale
WideCharToMultiByte
GetProcessTimes
ClearCommBreak
GetSystemTimeAsFileTime
ExpandEnvironmentStringsA
WaitForSingleObject
GlobalLock
SetHandleInformation
WaitNamedPipeA
LoadLibraryExW
MapViewOfFile
GetLocaleInfoA
GlobalMemoryStatus
GetDateFormatW
GetProcessAffinityMask
EnterCriticalSection
DecodePointer
EncodePointer
GetExitCodeThread
DuplicateHandle
GetCurrentThreadId

user32

RegisterClassA
DestroyAcceleratorTable
SetWindowRgn
GetMessageW
TrackPopupMenu
MsgWaitForMultipleObjects
IsZoomed
DrawIconEx
LoadStringA
GetParent
LoadIconA
RemovePropA
GetWindowInfo
SetParent
SetFocus
SetScrollRange
GetCapture
GetKeyboardState
CreateDialogIndirectParamA
GetWindowPlacement
GetWindowTextA
SetRect
SetWindowLongA
GetScrollInfo
MessageBoxA
UnionRect
InvalidateRect
UnregisterClassA
GetWindowLongA
ReleaseDC
EndDialog
DefWindowProcA
CheckDlgButton
ShowWindow
CreatePopupMenu
EnableScrollBar
FlashWindow
CreateWindowExW
ScrollWindowEx
GetSystemMetrics
SetWindowTextA
ValidateRgn
SendMessageW
UpdateWindow
GetDlgItemTextA
SetDlgItemTextA
CheckMenuItem
GetWindowThreadProcessId
ScrollWindow
ShowOwnedPopups
EndPaint
DestroyWindow
GetMessageA
HideCaret
SendDlgItemMessageA
IsIconic
DeleteMenu
GetWindowTextLengthA
DrawEdge
EnumWindows
GetDC
DrawFocusRect
ShowCursor
EnableMenuItem
GetDlgItem
RedrawWindow
GetDesktopWindow
GetSysColor
SetMenu
IsDlgButtonChecked
DrawMenuBar
CheckRadioButton
SystemParametersInfoA
BeginDeferWindowPos
RegisterClassW
SetCaretPos
SetScrollInfo
GetMessageTime

gdi32

SetWindowOrgEx
PolyPolygon
TranslateCharsetInfo
Arc
SetViewportOrgEx
LineTo
SetWindowExtEx
GetMetaFileBitsEx
SetTextColor
MaskBlt
CreateHatchBrush
CreateFontA
CopyEnhMetaFileA
GdiFlush
GetEnhMetaFileHeader
GetRegionData
DeleteObject
SelectObject
GetPaletteEntries
CreatePenIndirect
PolyPolyline
CreateCompatibleBitmap
OffsetRgn
SaveDC
RealizePalette
GetObjectType
GetTextExtentPointW
GetBkColor
GetObjectW
GetTextExtentExPointA
GetCharWidth32A
GetCharABCWidthsFloatA
SetROP2
SetWinMetaFileBits
ExtTextOutA
CloseEnhMetaFile
RestoreDC
CreateSolidBrush
MoveToEx
EndPage
GetTextExtentPoint32A
GetCharacterPlacementW
DeleteDC
CreateFontIndirectA
SetDIBColorTable
SetPixel
CreateCompatibleDC
CreateRectRgnIndirect
SetMapMode
Rectangle
CreateBrushIndirect
GetCurrentPositionEx
Polyline
RectVisible
IntersectClipRect
CreateDIBitmap
GetPixel
EndDoc
GetStockObject
CombineRgn

advapi32

SetSecurityDescriptorOwner
LookupPrivilegeValueW
RegDeleteKeyA
CopySid
EqualSid
GetLengthSid
GetUserNameA
RegOpenKeyExW
RegOpenKeyExA

shell32

ShellExecuteExW

ole32

CoTaskMemFree

Sections

.text
Size: 775KB - Virtual size: 774KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enZ
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a73edfdfbcf581bf35aac496eba73339

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 775KB - Virtual size: 774KB

.data Size: 6.0MB - Virtual size: 6.0MB

.idata Size: 7KB - Virtual size: 7KB

.enZ Size: 3KB - Virtual size: 3KB

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 775KB - Virtual size: 774KB

.data
Size: 6.0MB - Virtual size: 6.0MB

.idata
Size: 7KB - Virtual size: 7KB

.enZ
Size: 3KB - Virtual size: 3KB

.reloc
Size: 16KB - Virtual size: 16KB