2024-08-20_fe5845417c0f06c364dced69c5816e96_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-20_fe5845417c0f06c364dced69c5816e96_bkransomware
Size

605KB
MD5

fe5845417c0f06c364dced69c5816e96
SHA1

1222046bd8f1c7e460ee2e712b5e7971f4a2c7dd
SHA256

988ddb2113801165b1418dcac66aa05892a848d47d9727d9ac41de58b1e184a6
SHA512

66734eb1ba30e7fae6ca365dbe877b2b1dabd959ced4ed86175c6df3a75b73dc2588a5a0dbbf240f891744bfc781ce497a36426978d8a3be7b09c4a1bc913781
SSDEEP

12288:IfGcOMxgAdS0/HyQOeEqEuOEQawPz2a3Az+KvHCPFWZlyG:IucOMx3zyQREqFOEv6zB3ArvIFw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-20_fe5845417c0f06c364dced69c5816e96_bkransomware

Files

2024-08-20_fe5845417c0f06c364dced69c5816e96_bkransomware
.exe windows:5 windows x86 arch:x86

a6c1faf7abd0a5e3d500aa4984ae8536

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetLastError
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
Beep
Sleep
ReadFile
GetTimeZoneInformation
GetCommandLineA
IsProcessorFeaturePresent
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
SetLastError
GetCurrentThread
GetCurrentThreadId
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
CloseHandle
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileType
SetFilePointerEx
GetFullPathNameA
GetStringTypeW
FlushFileBuffers
RaiseException
ReadConsoleW
DeleteFileW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
SetStdHandle
WriteConsoleW
HeapSize
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFullPathNameW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileW
GetFileAttributesExW
WaitForSingleObject
GetExitCodeProcess
CreateProcessA
SetEndOfFile

Sections

.text
Size: 490KB - Virtual size: 489KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a6c1faf7abd0a5e3d500aa4984ae8536

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 490KB - Virtual size: 489KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 42KB - Virtual size: 61KB

.reloc Size: 45KB - Virtual size: 44KB

.text
Size: 490KB - Virtual size: 489KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 42KB - Virtual size: 61KB

.reloc
Size: 45KB - Virtual size: 44KB