Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-13_3af0401cc8a4bca80045796f5d858c39_bkransomware_karagany.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-13_3af0401cc8a4bca80045796f5d858c39_bkransomware_karagany.exe
Resource
win10v2004-20241007-en
Target
2024-10-13_3af0401cc8a4bca80045796f5d858c39_bkransomware_karagany
Size
10.9MB
MD5
3af0401cc8a4bca80045796f5d858c39
SHA1
1c12c063cae8dc930190dfc4c744f6a3d098ad6c
SHA256
11ca173a74a19ac2f34471358aac2c79959d16a42ae924205ba6ed7f1186e1f5
SHA512
cc3f7bcc2030a03577035339b6d4c98208bfcb69c685e358d618cb7402722bc08238faec7a8073eb8a9ac204753b64501189466013c7e33efa6a9efd445a06bf
SSDEEP
196608:VLbYQVG2JOguavkNqkTf9ABa/MXvd4wdbOj93pL2hDcsqjZ72Oz+Arm5g1xFPld0:9bYlQRb8HW4w4lgosWZ6OEyVW
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
wvsprintfA
wsprintfA
MessageBoxA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ShellExecuteA
SHCreateDirectoryExA
SHGetFolderPathA
SetEndOfFile
ReadFile
AreFileApisANSI
CreateFileW
WriteConsoleW
FlushFileBuffers
SetStdHandle
SetFilePointerEx
FreeResource
LockResource
HeapAlloc
HeapFree
GetProcessHeap
GetShortPathNameA
OpenProcess
TerminateProcess
GetExitCodeProcess
GetLastError
SetLastError
WaitForSingleObject
LoadResource
SizeofResource
WriteFile
CloseHandle
FormatMessageA
lstrcpyA
lstrcatA
lstrlenA
GetModuleFileNameA
CreateProcessA
GetEnvironmentVariableA
SetEnvironmentVariableA
FindResourceA
GetTempPathA
GetTempFileNameA
GetWindowsDirectoryA
SetCurrentDirectoryA
CreateDirectoryA
QueryDosDeviceA
CreateFileA
DeleteFileA
MoveFileExA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetLocalTime
lstrcmpA
GetConsoleMode
GetConsoleCP
GetStringTypeW
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
ReadConsoleW
MultiByteToWideChar
WideCharToMultiByte
RaiseException
RtlUnwind
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetStdHandle
GetModuleFileNameW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapSize
GetCurrentThreadId
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
HeapReAlloc
LCMapStringW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetProcessImageFileNameA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ