2024-10-03_c5457e2dd50495c7f0750a410b7d44f7_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-03_c5457e2dd50495c7f0750a410b7d44f7_bkransomware
Size

494KB
MD5

c5457e2dd50495c7f0750a410b7d44f7
SHA1

55c14fb0d42f2efd1705ba4b01c1e2b86843b4a5
SHA256

69a6562896cfb98c558dfa0a9989ed432ea6e585a6bec0955c1fd854de510421
SHA512

8095503ae32ada9bd97145deb05481ccfcb3474b5dcab68c075c37b8128db406f4423b0a5ce118f26ce6a17f03d26140b5d8128844e34c804fddf97e6e1e2202
SSDEEP

6144:x5ZvvFteTw4RcrLffPMPUiodggcM8NHMJh89fTidpwTu9w:DZvvFsGfkP+gpM8J0hairQuW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-03_c5457e2dd50495c7f0750a410b7d44f7_bkransomware

Files

2024-10-03_c5457e2dd50495c7f0750a410b7d44f7_bkransomware
.exe windows:5 windows x86 arch:x86

eb052e7db1079daa9d75e64747ec8fa3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDCBrushColor
GetTextCharset
GetDCPenColor
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetObjectType

user32

GetWindowDC
GetMenuItemCount
GetMenuItemID
GetPropA
GetMenuContextHelpId
WindowFromDC
SetFocus
EndPaint
SetWindowTextA
GetDlgItem
GetScrollPos
CheckDlgButton
GetDlgItemInt
GetInputState
GetDC
MoveWindow
GetMenuState
GetForegroundWindow
RemovePropA
PostMessageA
SetDlgItemTextA
GetWindowLongA
GetMenu
EnableWindow
SendMessageA
GetQueueStatus
DrawTextA
GetWindowContextHelpId

kernel32

GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcAddress
GetCurrentProcessId
FindResourceA
GetTickCount
QueryPerformanceCounter
GlobalFlags
CloseHandle
GetLastError
LoadResource
IsDebuggerPresent
GetProcessHeap
DeleteFileA
GetCurrentThreadId
LocalFlags
MoveFileA
GlobalSize
GetCurrentProcess
GetModuleHandleA
IsProcessorFeaturePresent
SetFilePointer
SizeofResource
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
SetLastError
GetCurrentThread
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetFileType
GetModuleFileNameA
SetEnvironmentVariableA

Sections

.text
Size: 423KB - Virtual size: 423KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

eb052e7db1079daa9d75e64747ec8fa3

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 423KB - Virtual size: 423KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 45KB - Virtual size: 167KB

.text
Size: 423KB - Virtual size: 423KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 45KB - Virtual size: 167KB