Static task
static1
Behavioral task
behavioral1
Sample
2024-05-24_f793b0bdfb3c06ba932dddffb5be9ad8_bkransomware.exe
Resource
win7-20240221-en
General
-
Target
2024-05-24_f793b0bdfb3c06ba932dddffb5be9ad8_bkransomware
-
Size
6.7MB
-
MD5
f793b0bdfb3c06ba932dddffb5be9ad8
-
SHA1
b17c6d562c371f8140432354b4304ac4d03fe41f
-
SHA256
b9026fce43a810a6a6b216a2cf6d9a39e9cf265caac3b8c46de3a1bdef8a606d
-
SHA512
e587a085e39d6691b7ee55fda9581dd14fb175a619d5613a1370a5ae4bc661dfd8c6cbc82dbffb75787eb228778b88a8feddd1a9df83540ace73cbd15cf0d501
-
SSDEEP
196608:chjvlx3/aPRLJ5uuC49qd3rGC03XhzuxktD0:cdvb/wRLauu5GCWoxktD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2024-05-24_f793b0bdfb3c06ba932dddffb5be9ad8_bkransomware
Files
-
2024-05-24_f793b0bdfb3c06ba932dddffb5be9ad8_bkransomware.exe windows:6 windows x86 arch:x86
8081177e2a10d3a69787d7025f432d38
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
GetStringTypeW
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
LoadLibraryW
SetStdHandle
WriteConsoleW
Sleep
SuspendThread
FileTimeToLocalFileTime
DeviceIoControl
RemoveDirectoryW
GetLastError
GetCPInfoExW
VerifyVersionInfoW
GetTempPathW
FileTimeToSystemTime
GetFileAttributesW
GetVersionExW
CreateDirectoryW
GetLogicalDrives
FindResourceW
VerSetConditionMask
FindFirstFileW
GetFullPathNameW
GetThreadPriority
GetSystemInfo
lstrcpynW
HeapCreate
SizeofResource
SignalObjectAndWait
VirtualAlloc
SystemTimeToTzSpecificLocalTime
IsDebuggerPresent
GetProcessHeap
HeapAlloc
HeapSize
WideCharToMultiByte
MultiByteToWideChar
CreateFileW
GetModuleHandleExW
ExitProcess
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
CreateThread
ExitThread
LoadLibraryExW
HeapFree
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SwitchToThread
SetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
user32
GetMessageW
ShowWindow
CreateWindowExW
SendMessageW
UpdateWindow
MapDialogRect
CharNextW
MsgWaitForMultipleObjects
GetKeyState
GetParent
AttachThreadInput
MessageBeep
BeginPaint
OffsetRect
GetKeyboardLayout
SetWindowsHookExA
GetSysColorBrush
RegisterWindowMessageW
CheckRadioButton
SystemParametersInfoA
GetDlgItemTextW
GetCaretBlinkTime
CheckMenuItem
RegisterClassA
GetWindow
ToAsciiEx
EndPaint
SetCursor
HideCaret
PostMessageW
LoadIconA
GetDC
GetScrollInfo
UnionRect
InvalidateRect
LoadMenuW
ScrollWindow
SendDlgItemMessageW
GetDesktopWindow
IsWindow
PostMessageA
InsertMenuW
ReleaseCapture
SetCaretPos
SetDlgItemTextW
FlashWindow
gdi32
PatBlt
SetDIBColorTable
CreatePalette
DeleteObject
CreatePenIndirect
CreateRectRgnIndirect
GetObjectType
SelectPalette
SetPaletteEntries
RoundRect
IntersectClipRect
GetPixel
CreateSolidBrush
BitBlt
CreateHalftonePalette
Rectangle
GetTextExtentPointA
GetCharABCWidthsFloatA
RectVisible
EndDoc
TextOutA
GetTextExtentPoint32W
comdlg32
GetSaveFileNameW
advapi32
RegEnumKeyExW
CloseServiceHandle
GetUserNameA
RegConnectRegistryW
QueryServiceStatus
RegGetKeySecurity
RegQueryInfoKeyW
EqualSid
RegSetValueExW
shell32
ShellExecuteExW
CommandLineToArgvW
ExtractIconExW
Shell_NotifyIconW
oleaut32
VariantInit
SafeArrayGetLBound
SafeArrayCreate
SafeArrayPtrOfIndex
Sections
.text Size: 766KB - Virtual size: 766KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ