2024-08-20_d893bb1b64ce8e9a27b7d0927f8668af_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-20_d893bb1b64ce8e9a27b7d0927f8668af_bkransomware
Size

767KB
MD5

d893bb1b64ce8e9a27b7d0927f8668af
SHA1

78727f2d26ce561fe66d1eb7614430fef22ff60f
SHA256

d69a864da452a4e4b522c7924794220dd339739313861a22b5239ca62a2432e9
SHA512

7e7d7be680687e852f6b5ab40ede7ea2d487b31b3e3fe11e32489853b532f49dc808e9783d2e00c88f0443c6f4b70c1cb35ff832903ad3be07e4f8e08395b5ba
SSDEEP

6144:7BabLSKGWqeH8KjXegepWkef6c8s6L1BR+dx3prO4+APOGbkeCQ:ILNGQH8KjXfJW1HQDO4dZbkk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-20_d893bb1b64ce8e9a27b7d0927f8668af_bkransomware

Files

2024-08-20_d893bb1b64ce8e9a27b7d0927f8668af_bkransomware
.exe windows:6 windows x86 arch:x86

b15a64365a1f1f55e3dacd78b4c585ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Root\Documents\VS.2012\CPlusPlus\CHTrainers\2016\06.June\Trainers.New\Planet.Centauri.Trainers\Planet.Centauri.Trainer_v0.5.11\Release\PlanetCentauri.Plus4.Trainer.pdb

Imports

kernel32

VirtualAllocEx
Process32FirstW
LockResource
Module32FirstW
Process32NextW
CreateToolhelp32Snapshot
Module32NextW
CloseHandle
WriteProcessMemory
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapSize
HeapReAlloc
OutputDebugStringW
RtlUnwind
LoadLibraryExW
GetStringTypeW
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
GetLastError
WritePrivateProfileStringW
CreateFileW
ReadFile
Beep
ReadProcessMemory
SizeofResource
Sleep
VirtualFreeEx
OpenProcess
WriteFile
VirtualQueryEx
GetPrivateProfileStringW
CreateDirectoryW
LoadResource
LCMapStringW
FindResourceW
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
WriteConsoleW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameW
GetModuleFileNameA
WaitForSingleObject
CreateThread
SetThreadPriority
HeapAlloc
HeapCreate
HeapDestroy
SetFilePointer
FindResourceA
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
MultiByteToWideChar
ExitProcess
GetModuleHandleExW
GetProcAddress
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW

user32

EnableWindow
SendMessageW
CloseWindow
GetSystemMetrics
UpdateWindow
DefWindowProcW
EndPaint
DestroyWindow
SetCursor
SetTimer
GetMessageW
PostQuitMessage
LoadImageW
UnregisterClassW
KillTimer
DrawTextA
GetFocus
LoadCursorW
MessageBoxW
SetFocus
BeginPaint
GetDC
TranslateMessage
RegisterClassExW
LoadIconW
GetAsyncKeyState
ReleaseDC
RedrawWindow
SetLayeredWindowAttributes
ShowWindow
CreateWindowExW
DispatchMessageW

gdi32

BitBlt
PatBlt
LineTo
SetTextColor
DeleteDC
SetBkColor
SetPixel
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontW
CreatePen
TextOutW
MoveToEx

shell32

ShellExecuteW

winmm

mciSendStringW
waveOutClose
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
waveOutGetPosition

Sections

.text
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 403KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b15a64365a1f1f55e3dacd78b4c585ee

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

shell32

winmm

Sections

.text Size: 264KB - Virtual size: 263KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 6KB - Virtual size: 96KB

.rsrc Size: 403KB - Virtual size: 403KB

.reloc Size: 68KB - Virtual size: 68KB

.text
Size: 264KB - Virtual size: 263KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 6KB - Virtual size: 96KB

.rsrc
Size: 403KB - Virtual size: 403KB

.reloc
Size: 68KB - Virtual size: 68KB