2024-09-08_8ee495e7bcb5505614dc4e6263aa9558_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-08_8ee495e7bcb5505614dc4e6263aa9558_bkransomware
Size

6.6MB
MD5

8ee495e7bcb5505614dc4e6263aa9558
SHA1

c00a6017b7983185e56d809171094207d7b05db9
SHA256

44e261c4cf0b6d5f68df17578c0893061b9c1f27008564531c40ffd167d8aa8f
SHA512

86977363375981f67f8f72554935e305550fdefc1dd12a1df30244cfd61d42f76d46a56dcea169994d2a4ae5aead4ee6ccb390b6c89c71fb73020be66fc06dd8
SSDEEP

196608:TAnwYVOf6XlfQBr3v43OLUGqgRdB9lUWpePkD:I58MlfyDv+O7BDxvp04

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-08_8ee495e7bcb5505614dc4e6263aa9558_bkransomware

Files

2024-09-08_8ee495e7bcb5505614dc4e6263aa9558_bkransomware
.exe windows:6 windows x86 arch:x86

1645dc6bcb6007a4429753a9e51ade6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetStringTypeW
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
FreeLibraryAndExitThread
FreeLibrary
OutputDebugStringW
FreeEnvironmentStringsW
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
IsValidCodePage
SetStdHandle
GetProcessHeap
HeapAlloc
HeapSize
MultiByteToWideChar
ExitProcess
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
SetEvent
CreateTimerQueue
ExitThread
CreateThread
CreateSemaphoreW
GetProcAddress
GetModuleHandleW
GetTickCount
GetStartupInfoW
TlsSetValue
TlsGetValue
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WriteConsoleW
EnumSystemLocalesW
TlsFree
GetSystemTime
GetThreadTimes
GetCurrentProcessId
FindNextFileA
GetCommandLineW
CreatePipe
CreateFileMappingA
EnterCriticalSection
CreateNamedPipeA
FlushFileBuffers
GetACP
TerminateProcess
CreateProcessA
IsProcessorFeaturePresent
Sleep
InitializeCriticalSectionAndSpinCount
IsValidLocale
OpenProcess
GetCurrentThread
WaitForSingleObjectEx
GetModuleHandleExW
HeapFree
GetEnvironmentStringsW
LoadLibraryExW
SetEndOfFile
GetLocaleInfoA
CloseHandle
TlsAlloc
DeleteCriticalSection
GetModuleHandleA
CreateEventW
CompareStringW
GetSystemTimeAdjustment
WideCharToMultiByte
SetCommTimeouts
GetWindowsDirectoryA
WaitForSingleObject
QueryPerformanceCounter
SetEnvironmentVariableW
InitializeSListHead
GetCurrentProcess
SetDllDirectoryW
VirtualQuery
MapViewOfFile
GlobalMemoryStatus
GetEnvironmentVariableW
IsDebuggerPresent
RtlUnwind
RaiseException
DuplicateHandle
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
LeaveCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
CreateFileW

user32

ToAsciiEx
ClientToScreen
SetWindowRgn
GetSystemMenu
HideCaret
GetWindowRect
CreateDialogParamA
GetMessageW
PostQuitMessage
IsZoomed
CreateIconIndirect
DrawFocusRect
GetKeyboardState
CreateDialogIndirectParamA
MessageBoxA
UnionRect
GetWindowLongA
SetClassLongA
ScrollWindow
DefWindowProcA
CheckDlgButton
ShowWindow
CreatePopupMenu
IsDlgButtonChecked
RemoveMenu
CreateWindowExW
ValidateRgn
SendMessageW
UpdateWindow
DestroyMenu
GetDlgItemTextA
CheckMenuItem
GetMessageTime
EndPaint
SetCursor
KillTimer
MsgWaitForMultipleObjects
DeleteMenu
SetParent
CreateMenu
SetFocus
GetWindowTextLengthA
DrawEdge
ShowCaret
WaitMessage
GetDC
GetQueueStatus
GetCapture
SetPropA
GetKeyboardLayout
SetRect
CheckMenuRadioItem
SetWindowLongA
InvalidateRect
UnregisterClassA
SetScrollPos
EndDialog
DestroyCaret
GetDesktopWindow
GetSysColor
PostMessageA
CheckRadioButton
SystemParametersInfoA
ReleaseCapture
ScrollWindowEx
BeginDeferWindowPos
InsertMenuA
EnableWindow
LoadCursorA
ValidateRect
IsRectEmpty
GetMessageA

gdi32

CreatePolygonRgn
SetWindowOrgEx
PolyPolygon
EndPage
Arc
SetTextColor
Polygon
GetRgnBox
CreatePalette
SelectClipRgn
Ellipse
StretchDIBits
GetCurrentPositionEx
GetNearestPaletteIndex
CreatePatternBrush
Polyline
SetTextAlign
CreateDIBitmap
CloseEnhMetaFile
CreateEnhMetaFileW
ExtCreatePen
GetTextExtentPoint32A
SetWindowExtEx
SetDIBColorTable
CopyEnhMetaFileA
CreateHalftonePalette
GetEnhMetaFileHeader
GetRegionData
GetBkColor
GetDIBColorTable
SetStretchBltMode
GetTextExtentPointA
GetCharABCWidthsFloatA
CreatePen
GetClipBox
SetROP2
GetStockObject
SetWinMetaFileBits
GetTextExtentExPointA

advapi32

RegDeleteValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CopySid
OpenProcessToken
RegCloseKey
GetUserNameA
SetSecurityDescriptorOwner
AllocateAndInitializeSid
LookupPrivilegeValueW

shell32

ShellExecuteExW

Sections

.text
Size: 657KB - Virtual size: 657KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eob
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1645dc6bcb6007a4429753a9e51ade6b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 657KB - Virtual size: 657KB

.data Size: 6.0MB - Virtual size: 6.0MB

.idata Size: 6KB - Virtual size: 6KB

.eob Size: 2KB - Virtual size: 2KB

.reloc Size: 13KB - Virtual size: 13KB

.text
Size: 657KB - Virtual size: 657KB

.data
Size: 6.0MB - Virtual size: 6.0MB

.idata
Size: 6KB - Virtual size: 6KB

.eob
Size: 2KB - Virtual size: 2KB

.reloc
Size: 13KB - Virtual size: 13KB