Static task
static1
Behavioral task
behavioral1
Sample
2024-05-26_80790d4d4c0f7ee0df21edc72fd85fcf_bkransomware.exe
Resource
win7-20240215-en
General
-
Target
2024-05-26_80790d4d4c0f7ee0df21edc72fd85fcf_bkransomware
-
Size
6.7MB
-
MD5
80790d4d4c0f7ee0df21edc72fd85fcf
-
SHA1
acbad915cc54802ea97d4ee16b443c7ef1b7868b
-
SHA256
ffb6b13a6aff0a65b91323e83fd7750e6512f36ee3dea2adc3cfebe271137600
-
SHA512
c20cc0758aacb2a6fec8f3d7e2e7cf958b6900c32d4236a7ccae83648684e82ae76eee667461c348dec1ee0c26b3a7900205869aa03f77c5635c12f7b1f6790f
-
SSDEEP
196608:Awv88eYQVpPtXnCU9X13FFyD3EtWuLKuMk:g8bOF3hHFFy7HwTMk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-26_80790d4d4c0f7ee0df21edc72fd85fcf_bkransomware
Files
-
2024-05-26_80790d4d4c0f7ee0df21edc72fd85fcf_bkransomware.exe windows:6 windows x86 arch:x86
7d5d28151e07b4374cfae496fa790bde
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SwitchToThread
ExitProcess
CreateFileA
GlobalMemoryStatus
FindFirstFileW
TlsGetValue
GetSystemDefaultUILanguage
SetErrorMode
SetDllDirectoryW
GetLogicalDrives
ConnectNamedPipe
WaitForSingleObjectEx
GetSystemTimeAsFileTime
GetProcessTimes
TlsSetValue
LoadLibraryW
InitializeCriticalSectionAndSpinCount
ReadProcessMemory
CreateEventA
GetSystemTimeAdjustment
MulDiv
GetModuleFileNameW
GetSystemDirectoryA
GetACP
SetThreadPriority
GlobalUnlock
GetCPInfoExW
ResetEvent
DeviceIoControl
FindNextFileW
ExpandEnvironmentStringsW
RaiseException
GetVersion
DeleteFileW
Sleep
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualFree
VirtualAlloc
GetVersionExW
GetModuleHandleA
lstrcpyW
SuspendThread
GetStringTypeW
LoadLibraryA
GlobalFree
SetLastError
IsDBCSLeadByteEx
GetLastError
VirtualProtect
SetThreadLocale
WritePrivateProfileStringW
ExitThread
GetOverlappedResult
FileTimeToSystemTime
IsProcessorFeaturePresent
LeaveCriticalSection
GetLocaleInfoW
ClearCommBreak
SetFilePointer
GetTickCount
CreateDirectoryW
GetCurrentProcess
FreeLibrary
UnmapViewOfFile
FileTimeToLocalFileTime
FreeLibraryAndExitThread
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
EnterCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineW
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateEventW
TerminateProcess
TlsAlloc
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
CreateThread
LoadLibraryExW
HeapFree
CreateTimerQueue
SetEvent
SignalObjectAndWait
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
HeapAlloc
GetProcessHeap
IsDebuggerPresent
IsValidCodePage
GetOEMCP
GetCPInfo
GetStdHandle
GetFileType
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
CreateFileW
user32
GetMessageW
ShowWindow
CreateWindowExW
UpdateWindow
GetMenuStringW
DrawTextExW
GetDC
CheckMenuRadioItem
SendMessageW
EnableScrollBar
GetKeyboardType
BeginDeferWindowPos
ValidateRgn
MapWindowPoints
DestroyMenu
GetWindowInfo
CharLowerBuffW
SetDlgItemInt
GetClassNameW
GetDesktopWindow
MessageBoxW
SetDlgItemTextW
GetMonitorInfoW
GetWindowThreadProcessId
LoadMenuW
gdi32
Polygon
GetRegionData
RectInRegion
ExtCreateRegion
GetObjectW
SetViewportExtEx
SetROP2
GetNearestPaletteIndex
GetMetaFileBitsEx
advapi32
SetSecurityDescriptorDacl
RegLoadKeyW
AdjustTokenPrivileges
RegEnumKeyExW
RegConnectRegistryW
RegOpenKeyExA
OpenSCManagerW
OpenProcessToken
ControlService
RegSetKeySecurity
RegDeleteValueA
ChangeServiceConfigW
LookupPrivilegeValueW
RegQueryValueExW
shell32
ShellExecuteExW
Shell_NotifyIconW
SHGetFileInfoW
oleaut32
VariantInit
VariantCopy
Sections
.text Size: 742KB - Virtual size: 742KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ