2024-09-13_d2631f85a8cd490753185afd22665a7f_bkransomware

Sharing

Copy URL

Twitter E-mail

General

Target

2024-09-13_d2631f85a8cd490753185afd22665a7f_bkransomware
Size

491KB
MD5

d2631f85a8cd490753185afd22665a7f
SHA1

8c1b58f13799c54006fe0e8e849721bfb16ece2b
SHA256

b87a934339979d9e8aca54baf12ee49e3089ccefe048ec2a983c5922b018d789
SHA512

faa11f7d53a22005b54922b7bcbb20521a3fff69fbd320773c49fe2577db6199269602902de0b9a97519e16e8eadbe0cc4fcfd4b6d268dc31cb819857284dcc6
SSDEEP

12288:HQUnhI/i6INrWIdmQyk7n2vNPbUVBGtXOaQw:w2hCi6WCGmQDnsRgUt+aQw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-13_d2631f85a8cd490753185afd22665a7f_bkransomware

Files

2024-09-13_d2631f85a8cd490753185afd22665a7f_bkransomware
.exe windows:5 windows x86 arch:x86

4eab107c5819ab6417ff36ec79637a6d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetTextCharacterExtra
GetFontLanguageInfo
GetCurrentObject
GetMetaRgn
GetDCBrushColor
GetMapMode
GetDCPenColor
GetDeviceCaps
GetGraphicsMode
GetClipRgn
GetNearestColor
SetTextJustification
GetNearestPaletteIndex

user32

GetMenuContextHelpId
LoadIconA
SetDlgItemTextA
GetDC
EndPaint
GetQueueStatus
GetPropA
GetWindowDC
GetMenuItemCount
GetWindowContextHelpId
SetFocus
WindowFromDC
IsWindowUnicode
GetForegroundWindow
EnableWindow
GetDlgItemInt
SendMessageA
CheckDlgButton
DrawTextA
GetCursor
GetScrollPos
BeginPaint
RemovePropA
PostMessageA
GetInputState

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
WriteConsoleW
SetStdHandle
SetFilePointerEx
OutputDebugStringW
GetModuleHandleA
GlobalHandle
GetProcAddress
LockResource
FlushFileBuffers
MoveFileA
GlobalFlags
GetProcessHeap
GetCurrentProcessId
IsProcessorFeaturePresent
GetTickCount
GetDriveTypeA
GlobalSize
GetCurrentThreadId
IsDebuggerPresent
GetVersion
GetCurrentProcess
QueryPerformanceCounter
WriteFile
DeleteFileA
GetLastError
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
GetCommandLineA
GetStdHandle
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
CloseHandle
SetLastError
GetCurrentThread
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileType
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA

Sections

.text
Size: 426KB - Virtual size: 425KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4eab107c5819ab6417ff36ec79637a6d

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 426KB - Virtual size: 425KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 39KB - Virtual size: 120KB

.text
Size: 426KB - Virtual size: 425KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 39KB - Virtual size: 120KB