Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-09_297adf8ec73d1db227132c2409876b1b_bkransomware_karagany.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-09_297adf8ec73d1db227132c2409876b1b_bkransomware_karagany.exe
Resource
win10v2004-20241007-en
Target
2024-10-09_297adf8ec73d1db227132c2409876b1b_bkransomware_karagany
Size
10.9MB
MD5
297adf8ec73d1db227132c2409876b1b
SHA1
1a7bb7c5ba7f17d2db1d4e2acf64557dda8cb32c
SHA256
5d68ea7454fbaab6ea3e9a4d716032b831b988daa08fd00fa740fd650729ed8c
SHA512
ee1d60b33ff2e535c384f1051c25d9d77896c3e99688270e48c5c0fb017c2e40d983a2a0d8603171bc2afa65126314d3feeb41ae978db3448fce39fce9230c71
SSDEEP
196608:XLbYQVG2JOguavkNqkTf9ABa/MXvd4wdbOj93pL2hDcsqjZ72Oz+Arm5g1xFPld0:7bYlQRb8HW4w4lgosWZ6OEyVW
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
wvsprintfA
wsprintfA
MessageBoxA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ShellExecuteA
SHCreateDirectoryExA
SHGetFolderPathA
SetEndOfFile
ReadFile
AreFileApisANSI
CreateFileW
WriteConsoleW
FlushFileBuffers
SetStdHandle
SetFilePointerEx
FreeResource
LockResource
HeapAlloc
HeapFree
GetProcessHeap
GetShortPathNameA
OpenProcess
TerminateProcess
GetExitCodeProcess
GetLastError
SetLastError
WaitForSingleObject
LoadResource
SizeofResource
WriteFile
CloseHandle
FormatMessageA
lstrcpyA
lstrcatA
lstrlenA
GetModuleFileNameA
CreateProcessA
GetEnvironmentVariableA
SetEnvironmentVariableA
FindResourceA
GetTempPathA
GetTempFileNameA
GetWindowsDirectoryA
SetCurrentDirectoryA
CreateDirectoryA
QueryDosDeviceA
CreateFileA
DeleteFileA
MoveFileExA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetLocalTime
lstrcmpA
GetConsoleMode
GetConsoleCP
GetStringTypeW
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
ReadConsoleW
MultiByteToWideChar
WideCharToMultiByte
RaiseException
RtlUnwind
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetStdHandle
GetModuleFileNameW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapSize
GetCurrentThreadId
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
HeapReAlloc
LCMapStringW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetProcessImageFileNameA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ