2024-09-01_fef236fe976be652bdab2a32b6be182c_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-01_fef236fe976be652bdab2a32b6be182c_bkransomware
Size

469KB
MD5

fef236fe976be652bdab2a32b6be182c
SHA1

ca1b37735135b3bf9a9a0af750260c633b562fa8
SHA256

59c74a0818be541de782d74c80d242f5f19adb5550d683c1d1706ee8cb72d0e5
SHA512

26e0e48e3f082f3e4397212720d51bdd49b1d7a4d0c9240b1850c9f0c40826dc10b8dafda839e26309678e8bbb69887b9b1bbc275f933ee93e32fb2bbd1536dc
SSDEEP

6144:AWEo2wmhYcIGXUKOq3VNvxI3vO56nz3CPCiV/mvLFvVSRMKk12:JEv+/GXxnu4uz3CPHV+hvVSOKk12

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-01_fef236fe976be652bdab2a32b6be182c_bkransomware

Files

2024-09-01_fef236fe976be652bdab2a32b6be182c_bkransomware
.exe windows:5 windows x86 arch:x86

7275747e07db12c6c3a3995a36b04d04

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetCurrentObject
GetTextCharset
GetDeviceCaps
GetFontUnicodeRanges
SetSystemPaletteUse
SetPixel
GetNearestColor
GetStretchBltMode
GetPixelFormat
GetRandomRgn
GetTextCharsetInfo
GetNearestPaletteIndex
GetSystemPaletteUse
GetMetaRgn
SetTextColor
SetTextCharacterExtra

user32

CallWindowProcA
GetMenuContextHelpId
LoadIconA
GetInputState
CheckDlgButton
SetWindowTextA
RemovePropA
GetMenuItemID
IsWindowEnabled
WindowFromDC
ShowWindow
SetFocus
EndPaint
GetDC
GetDlgItem
IsWindowUnicode
GetMenu
EnableWindow
MoveWindow
BeginPaint

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
WriteConsoleW
SetStdHandle
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
GetProcAddress
GetModuleHandleA
GetLastError
LockResource
IsDebuggerPresent
GetCurrentProcessId
FindClose
QueryPerformanceCounter
GetProcessHeap
GetDriveTypeA
GetCurrentProcess
MoveFileA
GetVersion
SizeofResource
GetTickCount
FlushFileBuffers
GlobalFlags
IsProcessorFeaturePresent
GlobalHandle
LocalFlags
FindResourceA
GetFileType
DeleteFileA
GlobalSize
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
GetCommandLineA
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThread
GetCurrentThreadId
GetConsoleCP
GetConsoleMode
CloseHandle
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
SetFilePointerEx
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
SetEnvironmentVariableA

Sections

.text
Size: 395KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7275747e07db12c6c3a3995a36b04d04

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 395KB - Virtual size: 395KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 48KB - Virtual size: 76KB

.text
Size: 395KB - Virtual size: 395KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 48KB - Virtual size: 76KB