2024-09-15_5427cb62c4300801c1a426f5799ace0b_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-15_5427cb62c4300801c1a426f5799ace0b_bkransomware
Size

470KB
MD5

5427cb62c4300801c1a426f5799ace0b
SHA1

5fbe9baa25d4cbb6c980ae30b70c0c0aee40028c
SHA256

5aa1636c8e6cf660a68b848911890f84d859f319c728e933034762517ec7c3ea
SHA512

cd4d16c9f09a0157d687b0c7dfd5ec35f657a350440fba62266f42cdf99ee174c4f81e261404d47dd5025d8d506a19b754583fbf6521f64b7e279db872a1ad1c
SSDEEP

12288:avQ920ZIFeiY+FNlCVQ3ijvGcwP9QjJJgxta2acWzfjGhq:avQ9202FeiY+F7CVQyj+cwP9QjJJgxtF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-15_5427cb62c4300801c1a426f5799ace0b_bkransomware

Files

2024-09-15_5427cb62c4300801c1a426f5799ace0b_bkransomware
.exe windows:5 windows x86 arch:x86

0af58cf03e311df17a1834d1f68a39c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetMetaRgn
GetRandomRgn
GetPixelFormat
SetTextAlign
GetDCBrushColor
SetTextJustification
GetGraphicsMode
UpdateColors
GetTextColor
SetPixel
GetSystemPaletteUse
GetStretchBltMode
GetFontLanguageInfo

user32

GetQueueStatus
WindowFromDC
DrawTextA
GetMenuState
GetInputState
GetMenuItemCount
EndPaint
GetCursor
ShowWindow
BeginPaint
EnableWindow
GetForegroundWindow
GetMenu
GetMenuItemID
SetDlgItemTextA
IsWindowUnicode
GetDC
CheckDlgButton
RemovePropA
CallWindowProcA
GetDlgItemInt
GetPropA
PostMessageA
GetDlgItem
GetMenuContextHelpId

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
OutputDebugStringW
GetProcAddress
GetModuleHandleA
GetProcessHeap
GetCurrentThreadId
GlobalAlloc
GlobalHandle
LoadResource
GetDriveTypeA
IsDebuggerPresent
FlushFileBuffers
GetTickCount
GetLastError
SetFilePointer
IsProcessorFeaturePresent
SizeofResource
GlobalFlags
FindResourceA
LocalFlags
GetCurrentProcess
GetCurrentProcessId
WriteFile
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
GetCommandLineA
GetStdHandle
GetModuleFileNameW
SetLastError
GetCurrentThread
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
GetConsoleCP
GetConsoleMode
CloseHandle
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA

Sections

.text
Size: 393KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0af58cf03e311df17a1834d1f68a39c6

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 393KB - Virtual size: 392KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 51KB - Virtual size: 186KB

.text
Size: 393KB - Virtual size: 392KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 51KB - Virtual size: 186KB