Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-30_7c676001cc452d83e544c00e398dd207_bkransomware_karagany.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-30_7c676001cc452d83e544c00e398dd207_bkransomware_karagany.exe
Resource
win10v2004-20240611-en
Target
2024-06-30_7c676001cc452d83e544c00e398dd207_bkransomware_karagany
Size
1.8MB
MD5
7c676001cc452d83e544c00e398dd207
SHA1
de7a90824e9b2e0b4d63e2ec3c55e7550f6f1d0f
SHA256
99e039eaa6283b9404fc973096dc24906109d19b5a8f7f74a50d90c143b0772a
SHA512
6df63fff83f90b03c724e708a4f00aedaa174c4e3191b5b780d68ca2b08b535d76dcfe286f59617d594d697368239469ccf7bbd1268a04c4656d4e0693431a22
SSDEEP
24576:AyZEGubJg8R8AvZulu/U4B6xidIKkrZp4cy0vQzk+dsrERW1uUOVu0/UdSqdtPd2:LEpVg3AIlAw4IpdE7srVXHd5dtP4f0y
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\build.tc\redrocks\work\fb60121f10014524\3am\products\rescue\Rescue780_Applet\rescue\Applet\native\bin\x86\LMIRescue.pdb
Sleep
lstrcatA
CreateDirectoryA
SetCurrentDirectoryA
FindFirstFileA
GetLastError
GetProcAddress
RemoveDirectoryA
FindClose
LoadLibraryA
FindNextFileA
GetModuleHandleA
GetTempPathA
DeleteFileA
lstrcpyA
CreateFileA
FindResourceA
SetFilePointer
FreeResource
GetWindowsDirectoryA
FormatMessageA
WriteFile
SizeofResource
GetFileAttributesA
CreateProcessA
SetLastError
CopyFileA
LockResource
GetModuleFileNameA
CloseHandle
GetCurrentDirectoryA
HeapAlloc
HeapFree
GetProcessHeap
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetCurrentProcess
FreeLibrary
lstrcpynA
lstrlenA
LoadResource
lstrcmpA
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetStdHandle
GetModuleFileNameW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
HeapSize
HeapReAlloc
LCMapStringW
RtlUnwind
GetStringTypeW
FlushFileBuffers
GetConsoleCP
CreateFileW
wvsprintfA
wsprintfA
MessageBoxA
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ