Static task
static1
Behavioral task
behavioral1
Sample
2024-05-28_bd741cae4a5955c610761f5d76c24a33_bkransomware.exe
Resource
win7-20240221-en
General
-
Target
2024-05-28_bd741cae4a5955c610761f5d76c24a33_bkransomware
-
Size
6.6MB
-
MD5
bd741cae4a5955c610761f5d76c24a33
-
SHA1
84138e2a3a7383f3aa2374a2e73d7e406c65c6d0
-
SHA256
44483ca13b239cd945275aa6aea3701bd6fc429b5f76a36819e726fdc377459c
-
SHA512
04fdc372eb393d2515b3fe0a8ce1ae4556d73b1c9c0debba671173e8584ce7f1b5ce2604763704aedfa4fd13916c8ff5fbf153758baa7ecea55886f7a8b70366
-
SSDEEP
196608:lNZILIcmCamzQRRkXeIt063S0Piv2QPMm9awLSN0p:lNqIBCayQRANC0Piv2Qr9J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-28_bd741cae4a5955c610761f5d76c24a33_bkransomware
Files
-
2024-05-28_bd741cae4a5955c610761f5d76c24a33_bkransomware.exe windows:6 windows x86 arch:x86
342481cdf96fca495b29facb945add49
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetProcessHeap
HeapAlloc
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
Sleep
DeleteFileW
GetVersion
GetWindowsDirectoryW
DeviceIoControl
FileTimeToSystemTime
GetFileAttributesW
LoadResource
GetExitCodeProcess
GetFileSize
FindFirstFileW
IsDebuggerPresent
GetSystemInfo
GetThreadLocale
FormatMessageW
LoadLibraryW
GetSystemDirectoryW
SignalObjectAndWait
GetModuleHandleA
GetSystemDefaultUILanguage
HeapSize
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleExW
ExitProcess
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
CreateThread
ExitThread
LoadLibraryExW
HeapFree
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
CreateFileW
user32
MapDialogRect
GetMessageW
ShowWindow
CreateWindowExW
UpdateWindow
ShowOwnedPopups
SetTimer
HideCaret
GetWindowRect
GetDoubleClickTime
GetMenu
SetWindowLongA
UnregisterClassA
GetWindowLongA
PeekMessageA
EnableMenuItem
AppendMenuA
GetMenuItemCount
GetDlgItemTextA
DialogBoxParamA
DestroyWindow
CharUpperBuffW
SetWindowTextW
SetCapture
KillTimer
MsgWaitForMultipleObjects
IsZoomed
GetKeyState
ModifyMenuW
GetDC
GetKeyboardState
OffsetRect
GetWindowTextA
InvalidateRect
ReleaseDC
GetDlgItem
EndDialog
DefWindowProcA
RedrawWindow
GetDesktopWindow
EnumChildWindows
IsWindow
InsertMenuW
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
MapWindowPoints
EnableWindow
gdi32
ExcludeClipRect
SetPixel
SelectClipRgn
GetTextExtentPointA
CreateDIBitmap
GetStockObject
UpdateColors
CreateSolidBrush
GetBitmapBits
TranslateCharsetInfo
GetPaletteEntries
SetMapMode
CreateCompatibleBitmap
GetTextExtentExPointA
GetCharWidth32A
ExtTextOutA
SetTextColor
comdlg32
GetSaveFileNameW
advapi32
GetUserNameA
OpenSCManagerW
CloseServiceHandle
RegLoadKeyW
RegEnumKeyExW
ControlService
EqualSid
RegUnLoadKeyW
shell32
ShellExecuteExW
CommandLineToArgvW
SHGetFileInfoW
Shell_NotifyIconW
ole32
CoInitialize
oleaut32
SysFreeString
SysAllocStringLen
SafeArrayCreate
VariantCopy
Sections
.text Size: 606KB - Virtual size: 605KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ