Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-06_a7bf65818d46158c7b30868eefc7e491_bkransomware_karagany.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-06_a7bf65818d46158c7b30868eefc7e491_bkransomware_karagany.exe
Resource
win10v2004-20240802-en
Target
2024-10-06_a7bf65818d46158c7b30868eefc7e491_bkransomware_karagany
Size
10.9MB
MD5
a7bf65818d46158c7b30868eefc7e491
SHA1
38d4a8f69bc5056d3e73f7c6763099cd02e865c3
SHA256
b8b7371cde124baf99f1c7fa947906ce7ce72b918a835c43eeadcf356a971c07
SHA512
87a6ba10a05162f515292fde7530ed052d08723ad547ea3ce1227168b32cf32d11b7ff904807b0bb019f91198260f2f025b378bdc727ef54eca4425c8adfd023
SSDEEP
196608:PLbYQVG2JOguavkNqkTf9ABa/MXvd4wdbOj93pL2hDcsqjZ72Oz+Arm5g1xFPld0:jbYlQRb8HW4w4lgosWZ6OEyVW
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
wvsprintfA
wsprintfA
MessageBoxA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ShellExecuteA
SHCreateDirectoryExA
SHGetFolderPathA
SetEndOfFile
ReadFile
AreFileApisANSI
CreateFileW
WriteConsoleW
FlushFileBuffers
SetStdHandle
SetFilePointerEx
FreeResource
LockResource
HeapAlloc
HeapFree
GetProcessHeap
GetShortPathNameA
OpenProcess
TerminateProcess
GetExitCodeProcess
GetLastError
SetLastError
WaitForSingleObject
LoadResource
SizeofResource
WriteFile
CloseHandle
FormatMessageA
lstrcpyA
lstrcatA
lstrlenA
GetModuleFileNameA
CreateProcessA
GetEnvironmentVariableA
SetEnvironmentVariableA
FindResourceA
GetTempPathA
GetTempFileNameA
GetWindowsDirectoryA
SetCurrentDirectoryA
CreateDirectoryA
QueryDosDeviceA
CreateFileA
DeleteFileA
MoveFileExA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetLocalTime
lstrcmpA
GetConsoleMode
GetConsoleCP
GetStringTypeW
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
ReadConsoleW
MultiByteToWideChar
WideCharToMultiByte
RaiseException
RtlUnwind
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetStdHandle
GetModuleFileNameW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapSize
GetCurrentThreadId
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
HeapReAlloc
LCMapStringW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetProcessImageFileNameA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ