2024-08-20_4b2d7ad62e45553c6cf51d76cd7245a8_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-20_4b2d7ad62e45553c6cf51d76cd7245a8_bkransomware
Size

6.7MB
MD5

4b2d7ad62e45553c6cf51d76cd7245a8
SHA1

d8a0e6f102eadb2bb0275845e1136608ab7a436a
SHA256

210e04660494a09a6328dbf6e4265be4b79bf574b1121683717f6fb56a153960
SHA512

7d37bd9d142637ec122a243cbb564adfa318f4ad490dd7a87c11f89e4c500bb62ce83da1607b63d9c016d8864b1b8fbfe7f38ad903b624a3c6e8aa80f3e0228b
SSDEEP

196608:M0E5jvufwgL2Yu1DwfJdp2nw6BHo6hLdsOuLxO/kgPtop:S5jKbCLpwf3p2nw6BHLdPCIV1o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-20_4b2d7ad62e45553c6cf51d76cd7245a8_bkransomware

Files

2024-08-20_4b2d7ad62e45553c6cf51d76cd7245a8_bkransomware
.exe windows:6 windows x86 arch:x86

60305e5a92abfd43bbdbc93c70882dc6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
GetProcessHeap
HeapAlloc
HeapSize
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleExW
ExitProcess
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
WaitForSingleObjectEx
SetEvent
CreateTimerQueue
HeapFree
LoadLibraryExW
ExitThread
CreateThread
CreateSemaphoreW
LCMapStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
SwitchToThread
WinExec
GetUserDefaultUILanguage
IsDebuggerPresent
QueryDosDeviceW
GetThreadLocale
GetLastError
SetThreadLocale
GetFileAttributesW
HeapDestroy
GetVersionExW
Sleep
GetPrivateProfileStringW
EnumCalendarInfoW
CompareFileTime
RtlCaptureContext
FindFirstFileW
GetTempFileNameW
GetFullPathNameW
lstrcpynW
ResumeThread
GetWindowsDirectoryW
EnumResourceTypesW
GetSystemInfo
DeviceIoControl
RemoveDirectoryW
GetExitCodeThread
GetDiskFreeSpaceW
GetPrivateProfileIntW
WritePrivateProfileStringW
FileTimeToSystemTime
HeapCreate
FormatMessageW
ReadProcessMemory
LoadLibraryW
SignalObjectAndWait
IsValidCodePage
GetProcAddress
GetModuleHandleW
GetTickCount
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateFileW

user32

HideCaret
GetWindowRect
CharUpperBuffW
MapDialogRect
GetMessageW
PostQuitMessage
SetKeyboardState
GetParent
MessageBeep
DrawTextExW
GetDoubleClickTime
GetQueueStatus
GetWindowPlacement
SetWindowLongA
MessageBoxA
UnionRect
GetWindowLongA
MonitorFromWindow
SetClassLongA
GetSysColor
CheckDlgButton
ShowWindow
IsDlgButtonChecked
AppendMenuA
CreateCaret
GetKeyboardType
CreateWindowExW
RegisterClassW
InsertMenuA
SetWindowTextA
SetRect
SendMessageW
MapWindowPoints
UpdateWindow
RegisterClassA
GetSystemMenu
ReleaseCapture
DestroyWindow
SetCursor
GetMessageA
GetDlgItemInt
CreateDialogParamA
SetCapture
MsgWaitForMultipleObjects
GetKeyState
AttachThreadInput
LoadIconA
RemovePropA
DrawEdge
GetMenuItemInfoW
GetDC
GetCapture
SetDlgItemInt
OffsetRect
SetPropA
GetKeyboardLayout
GetWindowLongW
GetDlgItem
ScrollWindow
SetWindowsHookExA
RedrawWindow
GetDesktopWindow
GetMenuItemCount
InsertMenuW
SetDlgItemTextW
GetCaretBlinkTime
SetMenuItemInfoW
SetDlgItemTextA
SetScrollInfo
ValidateRect
CheckMenuItem
TranslateMDISysAccel
GetWindow
GetDlgItemTextW

gdi32

GetBitmapBits
DeleteDC
CreateFontIndirectA
SelectObject
SelectClipRgn
GetDIBColorTable
GetCharABCWidthsFloatA
Polyline
SetTextAlign
EndDoc
GetStockObject
CreateFontIndirectW
CopyEnhMetaFileA
PatBlt
LineTo
MaskBlt
CreateFontA
ExcludeClipRect
CreateHalftonePalette
CreatePalette
GetPaletteEntries
CreateRectRgnIndirect
SetMapMode
CreateCompatibleBitmap
Rectangle
GetObjectType
SelectPalette
SetPaletteEntries
CreateRectRgn
GetCharWidth32A
GetTextExtentPointA
CreatePen
IntersectClipRect
CreateDIBitmap
GetCurrentPositionEx

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegSetValueExW
RegSetKeySecurity
ChangeServiceConfigW
EqualSid
CloseServiceHandle
RegLoadKeyW
RegUnLoadKeyW
RegEnumKeyExW
GetUserNameA
RegQueryInfoKeyW
CopySid
OpenServiceW

shell32

CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
SHGetFileInfoW

oleaut32

SafeArrayPtrOfIndex
SysReAllocStringLen
SafeArrayGetUBound
SysAllocStringLen
VariantClear
SafeArrayGetLBound

Sections

.text
Size: 724KB - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pHd
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60305e5a92abfd43bbdbc93c70882dc6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

Sections

.text Size: 724KB - Virtual size: 724KB

.data Size: 6.0MB - Virtual size: 6.0MB

.idata Size: 7KB - Virtual size: 6KB

.pHd Size: 2KB - Virtual size: 2KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 724KB - Virtual size: 724KB

.data
Size: 6.0MB - Virtual size: 6.0MB

.idata
Size: 7KB - Virtual size: 6KB

.pHd
Size: 2KB - Virtual size: 2KB

.reloc
Size: 14KB - Virtual size: 13KB