2024-09-13_fdab3af41daffe763c556d02552bed44_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-13_fdab3af41daffe763c556d02552bed44_bkransomware
Size

494KB
MD5

fdab3af41daffe763c556d02552bed44
SHA1

971fe3f0b9b5ee9189921e91778834da41967e8b
SHA256

d5bf1bbde92a1ec768f76b98b0816d4c172a75378edd11a9f70455d37e3be39e
SHA512

499a8d5960a91c5f2bf8eb3740e11efb6d1da479091f6e6e48049e96c52f27392c4b7df4a5c029520441bb0e23fc3a61d8307d7a63f4273dab55899477c65d14
SSDEEP

12288:IYHw2H84VCmn++QRkpTV249BJxb2W32oRqs0PVNHXkLqVHx9:IYHw2RQmn7QaxV59Dxb2sasWVxXD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-13_fdab3af41daffe763c556d02552bed44_bkransomware

Files

2024-09-13_fdab3af41daffe763c556d02552bed44_bkransomware
.exe windows:5 windows x86 arch:x86

c6f53522a47103cb1300a3f737604f22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetObjectType
GetNearestColor
GetTextCharacterExtra
GetPixelFormat
GetPolyFillMode
SetTextJustification
GetTextAlign
GetFontLanguageInfo
GetRandomRgn
GetDeviceCaps
GetGraphicsMode
GetMetaRgn
GetCurrentObject
GetTextCharsetInfo
SetSystemPaletteUse
GetStretchBltMode
GetSystemPaletteUse

user32

CheckDlgButton
GetMenuItemCount
GetMenuContextHelpId
EndDialog
GetDlgItem
GetWindowLongA
SetDlgItemTextA
ShowWindow
GetMenuCheckMarkDimensions
LoadIconA
IsWindowEnabled
SendMessageA
GetDC
BeginPaint
RemovePropA
GetInputState
GetDlgItemInt
GetDialogBaseUnits
EndPaint
GetKeyboardType
GetMenuItemID
GetQueueStatus

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
FlushFileBuffers
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
GetCurrentThreadId
FindClose
GetTickCount
DeleteFileA
GlobalHandle
IsDebuggerPresent
GetLastError
CloseHandle
LoadResource
MoveFileA
GlobalSize
LocalFlags
IsProcessorFeaturePresent
GetCurrentProcess
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
SetLastError
GetCurrentThread
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
SetFilePointerEx
SetStdHandle
WriteConsoleW
SetEnvironmentVariableA

Sections

.text
Size: 430KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c6f53522a47103cb1300a3f737604f22

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 430KB - Virtual size: 430KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 38KB - Virtual size: 100KB

.text
Size: 430KB - Virtual size: 430KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 38KB - Virtual size: 100KB