2024-09-09_57983528a1d4c0052a988ee1a48db07c_bkransomware

Sharing

Copy URL

Twitter E-mail

General

Target

2024-09-09_57983528a1d4c0052a988ee1a48db07c_bkransomware
Size

533KB
MD5

57983528a1d4c0052a988ee1a48db07c
SHA1

568e0900437bc662afa4eac01ad2d608cca4f93a
SHA256

a37d9483f5c15abf1b149e1d56921c45a1474ec73d96df9a6848eb51183eaa27
SHA512

95967dcb568ee41c1e801d86f1aed13ed90451f0c33e1037e2458e7b4638eb9e9b73b8f0e77640374925dfa4a39a306e703f937045eafd344a3f8b581de5f3d5
SSDEEP

12288:fjDziti9D4ATsAiJqiOOZTAV9gN/SO95Vo8V8P:1tDsZQUZQSNqO95m8V8P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-09_57983528a1d4c0052a988ee1a48db07c_bkransomware

Files

2024-09-09_57983528a1d4c0052a988ee1a48db07c_bkransomware
.exe windows:5 windows x86 arch:x86

72a3f049ea6112fd96077686ef7f232b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetTextCharset
GetTextAlign
GetRandomRgn
SetTextJustification
GetTextColor
GetDCBrushColor
GetDCPenColor
GetNearestPaletteIndex
SetPixel

user32

GetMenuContextHelpId
GetMenuState
GetWindowLongA
GetScrollPos
GetForegroundWindow
GetPropA
GetWindowContextHelpId
GetKeyboardType
DrawTextA
SetWindowTextA
GetDC
EnableWindow
GetDialogBaseUnits
IsWindowEnabled
SetFocus
MoveWindow
SetDlgItemTextA
GetInputState
CallWindowProcA
GetMenu
RemovePropA
LoadIconA
EndPaint
PostMessageA
BeginPaint
GetWindowDC
WindowFromDC
GetDlgItem

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
WriteConsoleW
SetStdHandle
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
SetFilePointerEx
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
GetTickCount
LocalFlags
GetCurrentProcessId
SetFilePointer
IsDebuggerPresent
GetModuleHandleA
MoveFileA
QueryPerformanceCounter
SizeofResource
IsProcessorFeaturePresent
FlushFileBuffers
GetLastError
LoadResource
GlobalFlags
GetCurrentThreadId
GetFileType
GetProcessHeap
GetFileTime
LockResource
GetProcAddress
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetStdHandle
WriteFile
GetModuleFileNameW
SetLastError
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
RtlUnwind
GetConsoleCP
GetConsoleMode
CloseHandle
SetEnvironmentVariableA

Sections

.text
Size: 457KB - Virtual size: 456KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

72a3f049ea6112fd96077686ef7f232b

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 457KB - Virtual size: 456KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 50KB - Virtual size: 220KB

.text
Size: 457KB - Virtual size: 456KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 50KB - Virtual size: 220KB