Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-09_bd76d95d0c1593598a7630b963eea946_bkransomware_karagany.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-09_bd76d95d0c1593598a7630b963eea946_bkransomware_karagany.exe
Resource
win10v2004-20241007-en
Target
2024-10-09_bd76d95d0c1593598a7630b963eea946_bkransomware_karagany
Size
10.9MB
MD5
bd76d95d0c1593598a7630b963eea946
SHA1
f90863c5d9484bb4ddd01edf6bc7fe713b47f06b
SHA256
b100487af749c0e4bf9db6eac1bc2e3d18b86f9848f89027596e24819cf4076d
SHA512
848dd605e96108e657b532e08eec840af7d74ac00fe9168d23d2f4276549df0b41acc7535d39fb4c61af63345b2f1f83aad47d2f3ed8ceae9abdb22d4c55462a
SSDEEP
196608:8LbYQVG2JOguavkNqkTf9ABa/MXvd4wdbOj93pL2hDcsqjZ72Oz+Arm5g1xFPld0:ubYlQRb8HW4w4lgosWZ6OEyVW
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
wvsprintfA
wsprintfA
MessageBoxA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ShellExecuteA
SHCreateDirectoryExA
SHGetFolderPathA
SetEndOfFile
ReadFile
AreFileApisANSI
CreateFileW
WriteConsoleW
FlushFileBuffers
SetStdHandle
SetFilePointerEx
FreeResource
LockResource
HeapAlloc
HeapFree
GetProcessHeap
GetShortPathNameA
OpenProcess
TerminateProcess
GetExitCodeProcess
GetLastError
SetLastError
WaitForSingleObject
LoadResource
SizeofResource
WriteFile
CloseHandle
FormatMessageA
lstrcpyA
lstrcatA
lstrlenA
GetModuleFileNameA
CreateProcessA
GetEnvironmentVariableA
SetEnvironmentVariableA
FindResourceA
GetTempPathA
GetTempFileNameA
GetWindowsDirectoryA
SetCurrentDirectoryA
CreateDirectoryA
QueryDosDeviceA
CreateFileA
DeleteFileA
MoveFileExA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetLocalTime
lstrcmpA
GetConsoleMode
GetConsoleCP
GetStringTypeW
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
ReadConsoleW
MultiByteToWideChar
WideCharToMultiByte
RaiseException
RtlUnwind
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetStdHandle
GetModuleFileNameW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapSize
GetCurrentThreadId
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
HeapReAlloc
LCMapStringW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetProcessImageFileNameA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ