2024-09-06_6a3c80d0f0a7211f2dfe4807040644c6_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-06_6a3c80d0f0a7211f2dfe4807040644c6_bkransomware
Size

6.6MB
MD5

6a3c80d0f0a7211f2dfe4807040644c6
SHA1

821595602684a9f00a226d157f5cab8f8b303a55
SHA256

5b56a89f7c57313a7a871d49f6bc998ce74e2ee06fe4c9d5f25ac8e6bc5bbf84
SHA512

b611bf03b38691c58fdbd80b4194e35c18d99a3427e7137467e562035fd9fc830370d49dc20b86b88e82c2b8be6fdd698f601b9ee770e3b5454f7c196ce17d25
SSDEEP

196608:QAnwhxJon7wqGtl666SSMGkSrQx6/K8lwibqP:HGxHGVfQY/K8w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-06_6a3c80d0f0a7211f2dfe4807040644c6_bkransomware

Files

2024-09-06_6a3c80d0f0a7211f2dfe4807040644c6_bkransomware
.exe windows:6 windows x86 arch:x86

1645dc6bcb6007a4429753a9e51ade6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetStringTypeW
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
FreeLibraryAndExitThread
FreeLibrary
OutputDebugStringW
FreeEnvironmentStringsW
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
IsValidCodePage
SetStdHandle
GetProcessHeap
HeapAlloc
HeapSize
MultiByteToWideChar
ExitProcess
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
SetEvent
CreateTimerQueue
ExitThread
CreateThread
CreateSemaphoreW
GetProcAddress
GetModuleHandleW
GetTickCount
GetStartupInfoW
TlsSetValue
TlsGetValue
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WriteConsoleW
EnumSystemLocalesW
TlsFree
GetSystemTime
GetThreadTimes
GetCurrentProcessId
FindNextFileA
GetCommandLineW
CreatePipe
CreateFileMappingA
EnterCriticalSection
CreateNamedPipeA
FlushFileBuffers
GetACP
TerminateProcess
CreateProcessA
IsProcessorFeaturePresent
Sleep
InitializeCriticalSectionAndSpinCount
IsValidLocale
OpenProcess
GetCurrentThread
WaitForSingleObjectEx
GetModuleHandleExW
HeapFree
GetEnvironmentStringsW
LoadLibraryExW
SetEndOfFile
GetLocaleInfoA
CloseHandle
TlsAlloc
DeleteCriticalSection
GetModuleHandleA
CreateEventW
CompareStringW
GetSystemTimeAdjustment
WideCharToMultiByte
SetCommTimeouts
GetWindowsDirectoryA
WaitForSingleObject
QueryPerformanceCounter
SetEnvironmentVariableW
InitializeSListHead
GetCurrentProcess
SetDllDirectoryW
VirtualQuery
MapViewOfFile
GlobalMemoryStatus
GetEnvironmentVariableW
IsDebuggerPresent
RtlUnwind
RaiseException
DuplicateHandle
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
LeaveCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
CreateFileW

user32

ToAsciiEx
ClientToScreen
SetWindowRgn
GetSystemMenu
HideCaret
GetWindowRect
CreateDialogParamA
GetMessageW
PostQuitMessage
IsZoomed
CreateIconIndirect
DrawFocusRect
GetKeyboardState
CreateDialogIndirectParamA
MessageBoxA
UnionRect
GetWindowLongA
SetClassLongA
ScrollWindow
DefWindowProcA
CheckDlgButton
ShowWindow
CreatePopupMenu
IsDlgButtonChecked
RemoveMenu
CreateWindowExW
ValidateRgn
SendMessageW
UpdateWindow
DestroyMenu
GetDlgItemTextA
CheckMenuItem
GetMessageTime
EndPaint
SetCursor
KillTimer
MsgWaitForMultipleObjects
DeleteMenu
SetParent
CreateMenu
SetFocus
GetWindowTextLengthA
DrawEdge
ShowCaret
WaitMessage
GetDC
GetQueueStatus
GetCapture
SetPropA
GetKeyboardLayout
SetRect
CheckMenuRadioItem
SetWindowLongA
InvalidateRect
UnregisterClassA
SetScrollPos
EndDialog
DestroyCaret
GetDesktopWindow
GetSysColor
PostMessageA
CheckRadioButton
SystemParametersInfoA
ReleaseCapture
ScrollWindowEx
BeginDeferWindowPos
InsertMenuA
EnableWindow
LoadCursorA
ValidateRect
IsRectEmpty
GetMessageA

gdi32

CreatePolygonRgn
SetWindowOrgEx
PolyPolygon
EndPage
Arc
SetTextColor
Polygon
GetRgnBox
CreatePalette
SelectClipRgn
Ellipse
StretchDIBits
GetCurrentPositionEx
GetNearestPaletteIndex
CreatePatternBrush
Polyline
SetTextAlign
CreateDIBitmap
CloseEnhMetaFile
CreateEnhMetaFileW
ExtCreatePen
GetTextExtentPoint32A
SetWindowExtEx
SetDIBColorTable
CopyEnhMetaFileA
CreateHalftonePalette
GetEnhMetaFileHeader
GetRegionData
GetBkColor
GetDIBColorTable
SetStretchBltMode
GetTextExtentPointA
GetCharABCWidthsFloatA
CreatePen
GetClipBox
SetROP2
GetStockObject
SetWinMetaFileBits
GetTextExtentExPointA

advapi32

RegDeleteValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CopySid
OpenProcessToken
RegCloseKey
GetUserNameA
SetSecurityDescriptorOwner
AllocateAndInitializeSid
LookupPrivilegeValueW

shell32

ShellExecuteExW

Sections

.text
Size: 657KB - Virtual size: 657KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eob
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1645dc6bcb6007a4429753a9e51ade6b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 657KB - Virtual size: 657KB

.data Size: 6.0MB - Virtual size: 6.0MB

.idata Size: 6KB - Virtual size: 6KB

.eob Size: 2KB - Virtual size: 2KB

.reloc Size: 13KB - Virtual size: 13KB

.text
Size: 657KB - Virtual size: 657KB

.data
Size: 6.0MB - Virtual size: 6.0MB

.idata
Size: 6KB - Virtual size: 6KB

.eob
Size: 2KB - Virtual size: 2KB

.reloc
Size: 13KB - Virtual size: 13KB