2024-09-09_f3cfe09db0e32f7c84a66cbdbdf5dae4_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-09_f3cfe09db0e32f7c84a66cbdbdf5dae4_bkransomware
Size

524KB
MD5

f3cfe09db0e32f7c84a66cbdbdf5dae4
SHA1

1758dcf2c1a99bf8bb5e2fe8bf0eb98961be4f03
SHA256

833c4d0e1a0c7ba50ee505e4180348d5977dfbc47bce6004e8c34523a6bec460
SHA512

8e8cc77f44b172df51ff4773ce240d7099ddf09f1f0ffd28d030f8a9197907b434f3e6f21e8a6ee67c81b0020e67a2eb4d3926b48da6a1a318bca0419712c703
SSDEEP

6144:eAJ7kGJlcQm/rqh8Ivly+BNj2Jpqom303EQiKS6GkMCPcNpIdiT:xJ79JmqhXyCpM5m303EQnSOPcNpId

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-09_f3cfe09db0e32f7c84a66cbdbdf5dae4_bkransomware

Files

2024-09-09_f3cfe09db0e32f7c84a66cbdbdf5dae4_bkransomware
.exe windows:5 windows x86 arch:x86

e0b72f8756cc4a9eed1a4e973d724b2e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDCPenColor
GetPolyFillMode
GetFontUnicodeRanges
GetMetaRgn
GetRandomRgn
SetTextCharacterExtra
SetTextJustification
GetFontLanguageInfo
GetTextAlign
GetCurrentObject
GetNearestPaletteIndex
GetDCBrushColor
GetStretchBltMode
GetSystemPaletteUse
GetDeviceCaps

user32

GetPropA
GetCursor
MoveWindow
EnableWindow
GetWindowDC
GetQueueStatus
GetInputState
GetMenuCheckMarkDimensions
GetMenu
GetMenuContextHelpId
GetDialogBaseUnits
RemovePropA
PostMessageA
SetDlgItemTextA
EndPaint
ShowWindow
GetMenuItemCount
LoadIconA
DrawTextA
SendMessageA
IsWindowEnabled

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalSize
GlobalFlags
MoveFileA
GlobalHandle
GetCurrentProcessId
GetProcessHeap
GlobalAlloc
GetFileType
LockResource
WriteFile
FindResourceA
GetStdHandle
SetFilePointer
QueryPerformanceCounter
SizeofResource
LocalFlags
IsProcessorFeaturePresent
DeleteFileA
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
GetCommandLineA
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
CloseHandle
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThread
GetCurrentThreadId
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
SetFilePointerEx
SetStdHandle
WriteConsoleW
FlushFileBuffers
SetEnvironmentVariableA

Sections

.text
Size: 451KB - Virtual size: 451KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e0b72f8756cc4a9eed1a4e973d724b2e

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 451KB - Virtual size: 451KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 46KB - Virtual size: 123KB

.text
Size: 451KB - Virtual size: 451KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 46KB - Virtual size: 123KB