2024-10-14_0220efc72bde8f424e68b230a3fae580_bkransomware

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-14_0220efc72bde8f424e68b230a3fae580_bkransomware
Size

6.6MB
MD5

0220efc72bde8f424e68b230a3fae580
SHA1

e3b5f2dd4f153d8f57ef3a3ecc408e5532f9294d
SHA256

33d921bb72cb5f6110d7cb9abd9f833ad38b0723ccb04cd8d3a9c0e9c3457a9c
SHA512

3a1149dc2f60c8440571b9cfb7a2164d42ab8661e2600bd4c665f9f1962cee087805a259d8d3f995273f71411b8f22900bb4a35fe2b145812a02507135e824db
SSDEEP

98304:UTgHnjjkFAWfz1RknHlwNKorI9/b+4kdCYwwCZXL212U0cR/UryGXDKAQChtin8j:UTUs4nSKorINlMC2CdL21UryG6qqG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-14_0220efc72bde8f424e68b230a3fae580_bkransomware

Files

2024-10-14_0220efc72bde8f424e68b230a3fae580_bkransomware
.exe windows:6 windows x86 arch:x86

115182a2bf7564c691de431ae25a7cbf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
FreeLibraryAndExitThread
OutputDebugStringW
FreeEnvironmentStringsW
GetCurrentProcessId
WriteFile
GetFileType
GetStdHandle
GetCPInfo
IsDebuggerPresent
GetProcessHeap
HeapAlloc
HeapSize
WideCharToMultiByte
ExitProcess
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
InterlockedPushEntrySList
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
SetEvent
CreateTimerQueue
HeapFree
LoadLibraryExW
ExitThread
CreateThread
CreateSemaphoreW
GetProcAddress
GetModuleHandleW
GetStartupInfoW
CreateEventW
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
RtlUnwind
RaiseException
HeapReAlloc
GetLastError
DecodePointer
EncodePointer
LeaveCriticalSection
EnterCriticalSection
GetExitCodeThread
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LCMapStringW
GetConsoleMode
SetFilePointerEx
LoadLibraryW
GetDateFormatW
SetStdHandle
ExpandEnvironmentStringsW
TlsFree
TlsAlloc
LoadLibraryA
GetLocalTime
FindClose
IsDBCSLeadByteEx
FlushFileBuffers
MultiByteToWideChar
GetACP
CompareStringW
CreateFileW
GetTimeZoneInformation
GetModuleFileNameW
TerminateProcess
MulDiv
Sleep
GetConsoleCP
GetProcessTimes
GetTickCount
SetHandleInformation
GetModuleHandleExW
GetCommState
SetDllDirectoryW
FreeLibrary
CreateFileA
GetEnvironmentVariableW
GetCommandLineW
EnumSystemLocalesW
GetSystemTime
OpenFileMappingA
GetThreadTimes
DeleteCriticalSection
GetStringTypeW
GetModuleHandleA
GetOEMCP
GetModuleFileNameA
GlobalFree
IsValidCodePage
FindFirstFileA
GetSystemDirectoryA
CreateEventA
InitializeCriticalSectionAndSpinCount
IsValidLocale
TlsSetValue
ClearCommBreak
GetSystemTimeAsFileTime
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeSListHead
SetEndOfFile
VirtualQuery
GetLocaleInfoA
TlsGetValue
GetLogicalProcessorInformation
GetCurrentThreadId
GetCurrentThread
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
WriteConsoleW

user32

CheckMenuItem
ToAsciiEx
DestroyAcceleratorTable
SetWindowRgn
GetMessageW
TrackPopupMenu
SetKeyboardState
KillTimer
MsgWaitForMultipleObjects
LoadIconA
GetWindowInfo
GetClientRect
EnumWindows
InflateRect
CreateDialogIndirectParamA
GetWindowPlacement
GetWindowTextA
MessageBoxA
InvalidateRect
PeekMessageA
DrawStateW
RedrawWindow
GetSysColor
ShowWindow
CreatePopupMenu
AppendMenuA
IsWindow
RemoveMenu
CreateWindowExW
MessageBoxW
SystemParametersInfoA
GetSystemMetrics
SendMessageW
UpdateWindow
LoadCursorA
GetDlgItemTextA
DialogBoxParamA
GetCaretBlinkTime
DrawFrameControl
CopyRect
GetMessageTime
GetWindowThreadProcessId
RegisterClassA
IsRectEmpty
DestroyWindow
SetCursor
GetMessageA
CreateDialogParamA
PostQuitMessage
SendDlgItemMessageA
IsIconic
SetCapture
RemovePropA
SetParent
SetFocus
DrawEdge
ShowCaret
GetDC
DrawFocusRect
ShowCursor
GetKeyboardLayout
SystemParametersInfoW
EnableMenuItem
DestroyCursor
GetDesktopWindow
IsDlgButtonChecked
EnableScrollBar
PostMessageA
CheckRadioButton
ScrollWindowEx
BeginDeferWindowPos
RegisterClassW
InsertMenuA
EnableWindow
DestroyIcon
ValidateRect

gdi32

GetBitmapBits
CreatePolygonRgn
MoveToEx
PolyPolygon
GetWindowOrgEx
Arc
PatBlt
CreateHatchBrush
CreateFontIndirectA
SetBkColor
CopyEnhMetaFileA
ExcludeClipRect
CreateHalftonePalette
GetEnhMetaFileHeader
CreatePenIndirect
CreateRectRgnIndirect
CreateCompatibleBitmap
OffsetRgn
GetObjectType
GetTextExtentPointW
SelectPalette
GetDIBColorTable
CreateRectRgn
GetTextExtentPointA
GetCharABCWidthsFloatA
Polyline
SetROP2
IntersectClipRect
GetPixel
EndDoc
CloseEnhMetaFile
MaskBlt
SetPolyFillMode
ExtCreatePen
BitBlt
TranslateCharsetInfo
GetTextExtentPoint32A
SetViewportOrgEx
SetWindowExtEx
GetMetaFileBitsEx
DeleteDC
GetDIBits
SetDIBColorTable
SetPixel
CreateBitmap
DeleteObject
PlayEnhMetaFile
SetMapMode
SaveDC
RealizePalette
StretchDIBits
SetPaletteEntries
GetCharABCWidthsW
CreatePatternBrush
SetViewportExtEx
RestoreDC
TextOutA
GetPaletteEntries

advapi32

SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
RegDeleteKeyA
OpenProcessToken
GetUserNameA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExW
CopySid

ole32

CoTaskMemFree

Sections

.text
Size: 577KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.XAERO
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

115182a2bf7564c691de431ae25a7cbf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

Sections

.text Size: 577KB - Virtual size: 576KB

.data Size: 6.0MB - Virtual size: 6.0MB

.idata Size: 7KB - Virtual size: 7KB

.XAERO Size: 3KB - Virtual size: 2KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 577KB - Virtual size: 576KB

.data
Size: 6.0MB - Virtual size: 6.0MB

.idata
Size: 7KB - Virtual size: 7KB

.XAERO
Size: 3KB - Virtual size: 2KB

.reloc
Size: 14KB - Virtual size: 13KB