2024-09-13_cf888e58a5e3f831f2a9e63773ba449f_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-13_cf888e58a5e3f831f2a9e63773ba449f_bkransomware
Size

465KB
MD5

cf888e58a5e3f831f2a9e63773ba449f
SHA1

1b32ba502b2bbef7106acc81ab628de4ea47f5a9
SHA256

b1e2507c91ed0c92b0df1f11932192a35626484fd742ed0295451b40aac9e5e8
SHA512

1318d5dc2f03b79328d875c9a5521af3f189dd8795e01ce7ca10ca01335e3f167228e4f6aa8d1080ce83c9c3e266b97de94d464d09f774c78b0ecb470c69fba2
SSDEEP

6144:/66U1r/retr1NHDdYJSKeKZuEMM+s5TWTjnLS1KGV9mWcbrhYnfFj05lAJw:UY7HDdkeWExsovGV9mWIh358w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-13_cf888e58a5e3f831f2a9e63773ba449f_bkransomware

Files

2024-09-13_cf888e58a5e3f831f2a9e63773ba449f_bkransomware
.exe windows:5 windows x86 arch:x86

6298d48a84828453497477e16527dd9b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDCBrushColor
GetNearestColor
GetSystemPaletteUse
GetBkColor
GetTextCharacterExtra
GetDCPenColor
GetTextAlign
GetClipRgn
GetGraphicsMode

user32

RemovePropA
SendMessageA
SetWindowTextA
GetPropA
SetFocus
MoveWindow
GetInputState
GetDialogBaseUnits
DrawTextA
EnableWindow
SetDlgItemTextA
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetWindowContextHelpId
CallWindowProcA
GetKeyboardType
PostMessageA
GetForegroundWindow
GetMenuState
GetMenu
ShowWindow
EndDialog
GetMenuContextHelpId
GetDlgItem
GetScrollPos

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
OutputDebugStringW
FreeEnvironmentStringsW
GetProcAddress
GetModuleHandleA
GetTickCount
GlobalSize
GetCurrentProcess
IsDebuggerPresent
LocalFlags
GetCurrentThreadId
GetFileTime
IsProcessorFeaturePresent
GetCurrentProcessId
GetVersion
QueryPerformanceCounter
LockResource
FindClose
GetLastError
FlushFileBuffers
WriteFile
GetFileType
GlobalFlags
GetStdHandle
GlobalHandle
HeapFree
HeapAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetSystemTimeAsFileTime
HeapReAlloc
GetCommandLineA
GetProcessHeap
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThread
RtlUnwind
GetConsoleCP
GetConsoleMode
CloseHandle
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleFileNameA
GetEnvironmentStringsW
SetEnvironmentVariableA

Sections

.text
Size: 398KB - Virtual size: 398KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6298d48a84828453497477e16527dd9b

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 398KB - Virtual size: 398KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 41KB - Virtual size: 57KB

.text
Size: 398KB - Virtual size: 398KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 41KB - Virtual size: 57KB