2024-09-09_416c12d11b20b2c7e34150203bec6b68_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-09_416c12d11b20b2c7e34150203bec6b68_bkransomware
Size

488KB
MD5

416c12d11b20b2c7e34150203bec6b68
SHA1

6437fba0f17f7c9009da493050b385a66ca943ee
SHA256

c2db3496090c518bfb2a7d2bb506c5ca63bfff50e67e7ac7646b27caec27e792
SHA512

16a77392ecd31fcd95f7141c5a8681993fcce807ca70a1e81d78bb06537a4fd76252e16d39f41c6ba28f4b7216d43e8fdc104ac698c5fe742de7fd418cae4299
SSDEEP

6144:V4bK3ZpLE//Kq9Z95ZEDDoEMpeLXuCgD75dS8DrEXzbOG4:VpjwSq395OXhj6Cg/5dSNDbOb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-09_416c12d11b20b2c7e34150203bec6b68_bkransomware

Files

2024-09-09_416c12d11b20b2c7e34150203bec6b68_bkransomware
.exe windows:5 windows x86 arch:x86

090e11f9865a305dd2650141ef0580c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetStretchBltMode
GetGraphicsMode
SetTextCharacterExtra
GetPolyFillMode
GetTextCharset
GetDCBrushColor
GetDCPenColor
GetSystemPaletteUse
GetRandomRgn
GetTextCharacterExtra
GetNearestPaletteIndex

user32

IsWindowUnicode
GetDialogBaseUnits
CheckDlgButton
ShowWindow
GetWindowLongA
GetPropA
GetWindowDC
GetDlgItemInt
GetMenuState
GetInputState
GetMenu
IsWindowEnabled
GetDlgItem
GetCursor
GetMenuContextHelpId
GetWindowContextHelpId
EndPaint
EndDialog
BeginPaint
SetDlgItemTextA
RemovePropA
GetScrollPos
PostMessageA
GetForegroundWindow
LoadIconA
GetKeyboardType
GetMenuCheckMarkDimensions
CallWindowProcA

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
FlushFileBuffers
WriteConsoleW
SetStdHandle
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
SetFilePointerEx
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcAddress
GetModuleHandleA
GlobalSize
GetTickCount
GetCurrentProcess
DeleteFileA
GetLastError
SetFilePointer
LockResource
MoveFileA
LoadResource
GetVersion
GlobalFlags
IsProcessorFeaturePresent
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
IsDebuggerPresent
SetLastError
GetCurrentThread
GetCurrentThreadId
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetConsoleCP
GetConsoleMode
CloseHandle
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
SetEnvironmentVariableA

Sections

.text
Size: 427KB - Virtual size: 427KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

090e11f9865a305dd2650141ef0580c2

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 427KB - Virtual size: 427KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 35KB - Virtual size: 113KB

.text
Size: 427KB - Virtual size: 427KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 35KB - Virtual size: 113KB