2024-09-03_279f0e830a4f86c340351e3745a5efbe_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-03_279f0e830a4f86c340351e3745a5efbe_bkransomware
Size

472KB
MD5

279f0e830a4f86c340351e3745a5efbe
SHA1

411446c52a6f287ecfae1162b19eaa21462a64c9
SHA256

92cd734b068cee2edaaaf7141f01cc97aa41a9dce3c00401903e80934d612acc
SHA512

97e863edc54db4204fd1f214f2f2b415e536780a12c165177d1a877338b6ce9e91ee1772fdf761e91adecc4db5d56d5dee6c86adb3525446408d861327bdc8d8
SSDEEP

6144:rH3VYGJ9/AEJKklLVY/lOnxy1TiUlo0e5Dd5pe61tYkEL4n7yusD13eavE:rH3V59/3/GYDUl8Dde6Wum1y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-03_279f0e830a4f86c340351e3745a5efbe_bkransomware

Files

2024-09-03_279f0e830a4f86c340351e3745a5efbe_bkransomware
.exe windows:5 windows x86 arch:x86

eb7ec66fcd4a35f0f1b735a03ed82241

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetTextCharsetInfo
GetDCPenColor
GetClipRgn
GetTextAlign
GetNearestPaletteIndex
GetFontLanguageInfo
GetPolyFillMode
GetRandomRgn
SetTextCharacterExtra
GetSystemPaletteUse

user32

SendMessageA
EnableWindow
EndDialog
SetWindowTextA
RemovePropA
BeginPaint
GetKeyboardType
SetDlgItemTextA
IsWindowUnicode
GetWindowContextHelpId
GetWindowDC
SetFocus
WindowFromDC
GetPropA
DrawTextA
GetWindowLongA
IsWindowEnabled
GetDlgItemInt
LoadIconA
CallWindowProcA
PostMessageA
GetDlgItem
GetForegroundWindow
GetMenuCheckMarkDimensions
GetMenuContextHelpId
ShowWindow
GetScrollPos
MoveWindow
GetMenuItemCount
GetMenuItemID

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
WriteConsoleW
SetStdHandle
SetFilePointerEx
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
GetProcAddress
WriteFile
GlobalSize
IsProcessorFeaturePresent
GetCurrentThreadId
GetCurrentProcessId
GetLastError
GetCurrentProcess
GlobalHandle
GetVersion
FlushFileBuffers
LocalFlags
FindResourceA
DeleteFileA
MoveFileA
SetFilePointer
CloseHandle
FindClose
GetModuleHandleA
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetProcessHeap
GetStdHandle
GetModuleFileNameW
SetLastError
GetCurrentThread
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetEnvironmentVariableA

Sections

.text
Size: 399KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

eb7ec66fcd4a35f0f1b735a03ed82241

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 399KB - Virtual size: 399KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 46KB - Virtual size: 124KB

.text
Size: 399KB - Virtual size: 399KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 46KB - Virtual size: 124KB