Static task
static1
Behavioral task
behavioral1
Sample
2024-05-24_f122c9f4f5d3a78cc144a1b91f4bc834_bkransomware.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-24_f122c9f4f5d3a78cc144a1b91f4bc834_bkransomware.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-05-24_f122c9f4f5d3a78cc144a1b91f4bc834_bkransomware
-
Size
6.7MB
-
MD5
f122c9f4f5d3a78cc144a1b91f4bc834
-
SHA1
4a6d6703d2650a10456ed9bf4b313db75dcf5588
-
SHA256
048a735f3df6c9d89c1e3af87f70db2ec0772997a2df8b8c0ee5a6b9ebe3c569
-
SHA512
4b8a19b121733e428c5332ae714c7125e245066e5320830d0e8d3d985435d1892cd2626681df459ccca0d7a1cce34a62bd22242d1b3d906e9df51b5c13b3d691
-
SSDEEP
98304:NEz1ErM42gpLN10MvdRd/I7MnyewAplmHZU4H6rIBG1EXJIR3JWM4LhrIiu+zM5:c1sMOP0MvFIdApgHOEVpC7ESn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-24_f122c9f4f5d3a78cc144a1b91f4bc834_bkransomware
Files
-
2024-05-24_f122c9f4f5d3a78cc144a1b91f4bc834_bkransomware.exe windows:6 windows x86 arch:x86
311f31e7711cb3642c533aa10840292b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
SetFilePointerEx
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
WriteFile
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
IsDebuggerPresent
GetProcessHeap
HeapAlloc
HeapSize
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryW
SetStdHandle
WriteConsoleW
Sleep
GetStringTypeW
CreatePipe
LoadLibraryA
IsValidCodePage
GetProcessTimes
SetCommTimeouts
ExpandEnvironmentStringsA
QueryPerformanceCounter
SetEnvironmentVariableW
MapViewOfFile
CreateFileA
ExpandEnvironmentStringsW
CloseHandle
EnumSystemLocalesW
ResetEvent
GetModuleFileNameW
IsProcessorFeaturePresent
GetSystemTimeAdjustment
LoadLibraryExW
FreeLibrary
GetVersionExW
ExitProcess
GetModuleHandleExW
UnregisterWait
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
CreateThread
ExitThread
HeapFree
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
CreateFileW
user32
GetMessageW
ShowWindow
CreateWindowExW
SendMessageW
UpdateWindow
HideCaret
PostQuitMessage
IsIconic
SetKeyboardState
WaitMessage
GetCapture
GetKeyboardState
InflateRect
CreateDialogIndirectParamA
OffsetRect
GetWindowTextA
GetKeyboardLayout
SetScrollPos
EnableMenuItem
GetDlgItem
EndDialog
CreatePopupMenu
DrawMenuBar
GetCaretBlinkTime
TranslateMDISysAccel
GetMessageTime
RegisterClassA
EndPaint
DestroyWindow
SetWindowRgn
SetTimer
MapDialogRect
KillTimer
DrawIconEx
GetClientRect
CreateMenu
ShowCaret
GetDC
CheckMenuRadioItem
UnregisterClassA
GetWindowLongA
SystemParametersInfoW
ReleaseDC
GetDesktopWindow
FlashWindow
SetWindowTextA
EnableWindow
InsertMenuA
gdi32
ExtFloodFill
GetRgnBox
DeleteObject
SelectClipRgn
GetObjectType
CreatePen
CreateDIBitmap
EndDoc
TextOutA
SetViewportOrgEx
GetCharacterPlacementW
GetRegionData
Ellipse
GetBkColor
SetPaletteEntries
GetSystemPaletteEntries
SetViewportExtEx
CreateEnhMetaFileW
TranslateCharsetInfo
advapi32
AdjustTokenPrivileges
RegOpenKeyExA
InitializeSecurityDescriptor
RegDeleteKeyA
CopySid
SetSecurityDescriptorOwner
RegCloseKey
shell32
ShellExecuteExW
Sections
.text Size: 714KB - Virtual size: 714KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ