2024-09-09_ac67deaae0c9c43c983ff1c8e462f11f_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-09_ac67deaae0c9c43c983ff1c8e462f11f_bkransomware
Size

506KB
MD5

ac67deaae0c9c43c983ff1c8e462f11f
SHA1

69deb48ec32700bf9a4b92acd4c4a1dab4e07eee
SHA256

683df359f66e2a8127eb3c90f92d271bb7801c8bb66148f73ac5b7d0d37875d0
SHA512

65cf98433990dc1315c22deabe5919b9751e6cd5ea51dcfd284ac6ed86a704fe60ad37e76a3c895b936fbe373e89feb45e4a0d0eaa15d2f6a51418214d945ac9
SSDEEP

6144:OVamf0Vo4ezv6x8usvBMhIkRZCPimgHXc7ILQGgzzr245GGpiqHB:qZJs8tBMePPm1Lngzzr2EpiqH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-09_ac67deaae0c9c43c983ff1c8e462f11f_bkransomware

Files

2024-09-09_ac67deaae0c9c43c983ff1c8e462f11f_bkransomware
.exe windows:5 windows x86 arch:x86

8e4a98576afb4eb69e2a93961e137ec8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetGraphicsMode
GetTextAlign
GetDeviceCaps
GetTextCharsetInfo
GetPixelFormat
GetObjectType
GetPolyFillMode
GetFontLanguageInfo
GetDCBrushColor
GetNearestColor
GetBkColor
GetMetaRgn

user32

IsWindowEnabled
GetDlgItem
LoadIconA
BeginPaint
GetDialogBaseUnits
GetWindowLongA
GetMenuItemCount
GetMenuContextHelpId
GetMenuCheckMarkDimensions
GetPropA
IsWindowUnicode
SetDlgItemTextA
SetFocus
GetInputState
GetCursor
SendMessageA
GetMenu
DrawTextA
GetQueueStatus
GetWindowContextHelpId
GetWindowDC
CheckDlgButton
GetDC
GetDlgItemInt
ShowWindow
EnableWindow
EndPaint
EndDialog

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
FlushFileBuffers
WriteConsoleW
SetStdHandle
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
SetFilePointerEx
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcAddress
GetLastError
GlobalFlags
DeleteFileA
LockResource
CloseHandle
GetTickCount
GetFileTime
MoveFileA
GlobalSize
GetDriveTypeA
GetModuleHandleA
GetVersion
GlobalHandle
LocalFlags
WriteFile
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
IsProcessorFeaturePresent
GetProcessHeap
GetStdHandle
GetModuleFileNameW
IsDebuggerPresent
SetLastError
GetCurrentThread
GetCurrentThreadId
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetConsoleCP
GetConsoleMode
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
SetEnvironmentVariableA

Sections

.text
Size: 434KB - Virtual size: 434KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8e4a98576afb4eb69e2a93961e137ec8

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 434KB - Virtual size: 434KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 45KB - Virtual size: 190KB

.text
Size: 434KB - Virtual size: 434KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 45KB - Virtual size: 190KB