2024-09-07_3ade304d6e2b63dcaf266f56fdbddcf3_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-07_3ade304d6e2b63dcaf266f56fdbddcf3_bkransomware
Size

500KB
MD5

3ade304d6e2b63dcaf266f56fdbddcf3
SHA1

290f959d2bf37f8dbe38a21bad31a717fba50eb0
SHA256

09c6988271f6e31490ad0e82a2dcdb7414be14f5828aa21a16b3d2c5fc66f28a
SHA512

e3d870194e1975acb692090d5a48b12bf3124197411ddc01264017d219df49302dfc980e17ec58649d28534503ab185e1e75e82abd9ff53fe0c4c1d95fa9b1d4
SSDEEP

6144:T0XwqCPSkjlLtIphTanH3GaComGgf0DUunRXsnLUZjFkhcyoM+KiEsg+mF:0unjlLtQRQooYf0DDLZjKhc9Ki7g9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-07_3ade304d6e2b63dcaf266f56fdbddcf3_bkransomware

Files

2024-09-07_3ade304d6e2b63dcaf266f56fdbddcf3_bkransomware
.exe windows:5 windows x86 arch:x86

0134d59df142531ea404dad7793a161d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetTextCharset
GetDeviceCaps
GetTextColor
GetTextCharsetInfo
GetSystemPaletteUse
GetNearestColor
SetTextJustification
GetGraphicsMode
GetCurrentObject
GetObjectType
GetBkColor
SetSystemPaletteUse
GetFontLanguageInfo
GetMetaRgn
UpdateColors
GetDCBrushColor
GetDCPenColor
GetClipRgn
GetFontUnicodeRanges

user32

ShowWindow
GetWindowDC
GetWindowLongA
CallWindowProcA
CheckDlgButton
GetDlgItemInt
EnableWindow
GetMenuItemID
GetInputState
LoadIconA
GetWindowContextHelpId
GetPropA
GetDC
WindowFromDC
BeginPaint
GetMenuContextHelpId
GetMenuState
SetFocus
GetCursor
GetDlgItem
EndPaint
IsWindowEnabled
GetMenuItemCount
MoveWindow

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetProcAddress
LoadResource
GetStdHandle
GlobalSize
GetModuleHandleA
SetFilePointer
LocalFlags
DeleteFileA
MoveFileA
IsProcessorFeaturePresent
GetCurrentProcess
FindResourceA
GetTickCount
FlushFileBuffers
CloseHandle
GlobalAlloc
GetCurrentThreadId
GetCurrentProcessId
GetLastError
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetProcessHeap
WriteFile
GetModuleFileNameW
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
SetLastError
GetCurrentThread
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
SetEnvironmentVariableA

Sections

.text
Size: 437KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0134d59df142531ea404dad7793a161d

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 437KB - Virtual size: 436KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 37KB - Virtual size: 156KB

.text
Size: 437KB - Virtual size: 436KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 37KB - Virtual size: 156KB